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(THE FOLLOWING PROCEEDINGS WERE HAD IN OPEN 
COURT, WITH ALL PARTIES AND COUNSEL PRESENT.) 

THE COURT: All right. Counsel approach he 
bench, please . 

******SEALED BENCH CONFERENCE****** 
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OF SEALED BENCH CONFERENCE NO. 1****** 
(THE FOLLOWING PROCEEDINGS WERE HAD IN OPEN 
COURT, WITH ALL PARTIES AND COUNSEL PRESENT.) 

THE COURT: Okay, all right, we are going to be 
in recess for ten minutes. 

Mr. Price and Mr. Marshal, bring out Mr. Brown, 

please . 

THE COURT SECURITY OFFICER: All rise. 
(THE FOLLOWING PROCEEDINGS WERE HAD IN OPEN COURT, 
WITH ALL PARTIES AND COUNSEL PRESENT.) 

THE COURT: I understand that Counsel has 
requested a bench conference; is that correct? 
MS. CADEDDU: Correct, Your Honor. 
THE COURT: All right, please approach. 
******SEALED BENCH CONFERENCE NO. 2****** 
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*******END OF SEALED BENCH CONFERENCE NO. 2 * * * * * 

(THE FOLLOWING PROCEEDINGS WERE HAD IN OPEN COURT, 
WITH ALL PARTIES AND COUNSEL PRESENT.) 
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THE COURT: This is United States versus Barrett 
Lancaster Brown case number 3 : 1 2 -CR- 3 1 7 -L and 
3 : 12-CR-4 13-L . Who is representing the government? 

MS. HEATH: Candy Heath for the government. Your 

Honor . 

THE COURT: Thank you, Ms. Heath. Who is 
representing Mr. Brown? 

MS. CADEDDU: Mario Cadeddu for Mr. Brown. 

MR. SWIFT: Charles Swift for Mr. Brown. 

MR. GHAPPOUR: Ahmed Ghappour for Mr. Brown. 

THE COURT: All right, thank you, Ms. Cadeddu, 
Mr. Swift, and Mr. Ghappour. 

Sir, are you Barrett Lancaster Brown? 

THE DEFENDANT BROWN: Yes, Your Honor. 

THE COURT: Mr. Brown, do you know why you are 
here today? 

THE DEFENDANT BROWN: Yes, Your Honor. 

THE COURT: Why is that, sir? 

THE DEFENDANT BROWN: I have been charged in a 
number of statutes, and although the government has 
dropped a number of them, some still remain, I am to be 
sentenced today. 

THE COURT: That is correct. You are to be 
sentenced to today. Are you prepared to proceed? 

THE DEFENDANT BROWN: Yes, Your Honor. 
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THE COURT: All right, you may be seated. 
With respect to this matter, the Court has before it 
the Pre-sentence Report, the Government's Notice of No 
Objections to the Pre-sentence Report, Objections to the 
Pre-sentence Report by Defendant, the Addendum to the 
Pre-sentence Report, Objections to the Addendum by the 
Defendant, the Government's Response to the Defense's 
Objections to the Pre-sentence Report and its Notice of 
No Objections to the Addendum, Defendant Barrett Brown's 
Sentencing Memorandum and exhibits, attached to this 
memorandum are charts prepared by Mr. Brown's Counsel 
that sets forth letters that they have received from 
interested persons, friends, and family regarding 
Mr. Brown's case. 

I think the chart shows some — I believe 102 
letters; some of them are attached. There is a selected 
sample of those letters attached to the document. The 
letters come from family members, his mother and father, 
aunt and uncle, cousins. There are letters coming from 
several different countries including Germany, Australia, 
United Kingdom, Switzerland, Sweden, Turkey, India, and, 
of course, from individuals in the United States and the 
Dallas area . 

Also, the Court has a impact statement from Combined 
Services, Incorporated regarding the financial loss 
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suffered caused by the attacked from Anonymous, an impact 
statement from the law firm of Puckett and Faraj 
regarding the closure of the law firm and financial loss 
resulting in — resulting from attack by Anonymous. Then 
the Court has before it the psychological evaluation of 
Mr. Brown performed by Dr. Randall Rattan. 

Are there other written documents that the Court 
should have received but has not received concerning this 
matter? 

MS. CADEDDU: I don't believe so. Your Honor. 

MS. HEATH: Not from the government. Your Honor. 

THE COURT: All right, Ms. Cadeddu, have you had 
sufficient time to discuss and read the pre-sentence 
report and the pre-sentence with your client Mr. Brown? 

MS. CADEDDU: Yes, Your Honor, we have. 

THE COURT: Mr. Brown, have you had sufficient 
time to read and discuss the pre-sentence report — 

THE DEFENDANT BROWN: Yes, Your Honor. 

THE COURT: -- and the addendum to the 
pre-sentence report with your Counsel? 

THE DEFENDANT BROWN: Yes, Your Honor. 

THE COURT: Thank you. There are a number of 
objections to the pre-sentence report. Based upon the 
Court's discussion with Counsel and in light of the 
Court's review of the record in this case as well as the 
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positions by the parties, the Court believes that it can 
cut to the chase on several objections or at least the 
major objections or some of the major objections, I 
should say. 

One major objection lodged by the defense is the 
correct intended loss amount, and just for the record, 
the probation officer finds the loss amount to be 
$3,670,884.45. While there is evidence in the record to 
support this figure, the Court notices that in the plea 
agreement the parties have agreed or at least the Court's 
understanding that the loss amount falls between $400,000 
and one million dollars. 

It is the Court's understanding that the government 
is not opposed to that amount and the defense is not 
opposed to that amount. I do not wish to put words in 
anyone's mouth, but has the Court correctly stated the 
conference held at the bench earlier? 

MS. CADEDDU: Yes, Your Honor, from the defense's 
perspective . 

MS. HEATH: Yes, Your Honor, from the 
government . 

THE COURT: All right, just so it is clear as 
stated before, there is evidence to support — there is 
some support for the position stated by the probation 
officer. However, in light of the plea agreement reached 
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by the parties and as the parties are aware, this is an 
llCl.l(b) plea agreement, and the parties have agreed 
that the appropriate sentencing guideline range for loss 
amount for the loss related to the violation of Title 18 
United States Code Section 3 is more than $400,000, but 
less than one million dollars. So what does that mean; 
what is the bottom line? The bottom line is that instead 
of an 18-level enhancement, the Court would add a 
14-level enhancement to the base offense level. 

Any question as to the ruling of the Court? 

MS. CADEDDU: No, Your Honor. 

MS. HEATH: No, Your Honor. 

THE COURT: The Court having decided that the 14 
levels is the appropriate amount of enhancement to the 
base offense level based upon the language in the plea 
agreement, particularly, paragraph 5 of the plea 
agreement, any remaining objections made as to the loss 
amount are moot . 

There is also an objection regarding relevant 
conduct, and I think we should proceed to that issue at 
this time. As the Court stated at the bench conference, 
the burden on this issue is on the government and 
Ms. Heath, do you have any witnesses to call as to the 
relevant conduct issue? 

MS. HEATH: Yes, Your Honor. 
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THE COURT: All right, call your first witness 

please . 

MS. HEATH: The government calls Special Agent 
Robert Smith. 

ROBERT SMITH , 

having been first duly sworn to tell the truth, the whole 
truth, and nothing but the truth, testified as follows: 
THE COURT: You may proceed, Ms. Heath. 
DIRECT EXAMINATION 

Q. (BY MS. HEATH) Please state your name and how you are 
employed . 

A. My name is Robert Smith. I am employed as an agent 
of the FBI. 

Q. Were you one of the case agents on the Barrett 
Lancaster Brown investigation? 
A. Yes, ma'am, I was. 

Q. With regard to that investigation were search 
warrants executed and computers taken from Barrett 
Brown's house and from his mother's house? 
A. That's correct. 

Q. With regard to the evidence in this case, does a lot 
of the evidence come from those computers? 

A. Yes, a good portion of the evidence comes from those 
computers . 

Q. With regard to computer evidence, could you give a 
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very brief background on your ability to review computer 
data? 

A. Well, my background is in computer science. I have 
been an agent for about twelve years now working mostly 
cyber crimes during that period, so I have extensive 
experience with reviewing digital evidence in that 
context, in particular, computers related to the ones we 
are talking about in this case. 

Q. And did we in preparation for this hearing mark a 
number of exhibits which came from computers basically 
either e-mails or IRC charts or screen shots of Pastebin 
or screen shots from other websites found on Mr. Barrett 
Brown's computer? 

A. Yes, and also from the internet. 

Q. Now, with regard to investigating Barrett Brown, when 

did you get involved in this investigation? 

A. I became involved with the investigation here in 

Dallas in January or early February of 2012. 

Q. And the basis for your investigation came from what 

course of conduct? 

A. There was a video that was on Russia TV that was 
brought to my attention which appeared to have an 
individual being interviewed by Russia TV to describe 
attacks that were going on, some of those were related to 
Mega Upload, others were related to attacks on the White 
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House . 

Q. When you say "Mega Upload," what is that? 

A. My understanding it was a file sharing website. 

Q. And the attacks on Mega Upload and attacks on the 

White House, who was claiming responsibility? 

A. His name is Barrett Brown. 

Q. And Barrett Brown was being interviewed as to his own 
involvement or as to what organization? 

A. Well, he was speaking about the group Anonymous and 
these attacks that were going on. 

Q. Did the media at that time represent Barrett Brown as 
a spokesperson for Anonymous? 

A. I think in this video he actually was interviewed is 
my recollection, yes. 

Q. Now, with regard to that particular newscast, was it 
determined that Mr. Brown was admitting to involvement 
and participation in certain attacks or with Anonymous in 
dealing with the data that was stolen from the attacks? 
A. What struck me about this particular video was that 
the newsperson actually stopped him at one point and 
actually sort of admonished him he appeared to be 
involved in criminal activity and asked if he wanted to 
admit that on the show, and then she continued on with 
the interview. 

Q. As the course of your investigation you indicated 
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that you obtained things from the internet. Were these 
other interviews of Mr. Barrett Brown by other media 
sources ? 
A . Yes , ma ' am . 

Q. And was one of them the NBC Nightly News? 
A. That's correct. 

Q. And approximately when was that interview done? 
A. My understanding is that interview was done on or 
about March of 2011. 

Q. With regard to your knowledge of what intrusions were 
occurring that were being claimed by Anonymous, what was 
happening around that time? 

A. Earlier in February of 2011, there had been intrusion 
into a company that was claiming to have information 
related to participants in Anonymous, and they were 
suspected of being — getting that information to law 
enforcement. There were attacks subsequent to that is my 
understanding and that company had a service compromise, 
emails taken over, some of the principals had their 
accounts taken over and the like is my understanding. 
Q. That particular company — I am afraid we will have 
to distinguish between different companies. Was that 
HBGary Federal? 
A . Yes . 

Q. And did that company ultimately close down based upon 
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some of the attacks? 

A. It is my understanding HBGary Federal ceased 
operation . 

Q. Now, when you were reviewing the computers for 
Barrett Brown, did you find involvement in any part of 
that intrusion and/or the after effects? 
A. I did. 

Q. What type of things did you find with regard to 
regarding the attacks? 

A. I found a number of artifacts. Some of those were 
chat conversations, for example. 

Q. When you say "artifacts," what do you mean? 
A. Files on the computer, chat logs. I found IRC chat 
logs including private messages between the account 
associated with Mr. Brown and individuals such as Topiary 
where they are discussing as the attacks are on going. 
There are conversations — there is a conversation where 
they talk about — Topiary talks about tweeting a message 
or here, watch this and tweets a message using one of the 
victim accounts. There is a screen shot of that message 
on the computer. 

There is a point where Mr. Brown appears to give 
advice to Topiary. At the end of that conversation my 
recollection is he talks about hiding laptops. 

MS. HEATH: Your Honor, at this time I am going 
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to offer into evidence Government's Exhibit Nos. 1 
through 61, absent Exhibit No. 10 and number 42, I 
believe. We had a couple of duplicates, so I had to pull 
some exhibits. Actually, it's 40, so Government's 
Exhibit No. 1 through 61 absent Number 10 and Number 42, 
and these are what the agent referred to as the exhibits 
we put together for the case which came from the 
computers and/or the internet related to Barrett Brown. 
A copy has been given to the defense. 

THE COURT: Any objection, Mr. Swift? 

MR. SWIFT: Yes, Your Honor, because it is a 
blanket — although, it is not a blanket objection as to 
relevance to many of the exhibits, I am not sure what 
they show toward the issues in — at issue from the 
probation report, and so I would ask the government to 
set out for each document that it believes is relevant 
rather than blanketly submitting them. Unfortunately, I 
received them this morning, and there is about — after I 
came to Court — there is about 500 pages, and I have not 
had an opportunity. I can't attest that I agree to the 
relevance . 

THE COURT: What is your response, Ms. Heath? 

MS. HEATH: These documents were from evidence 
previously provided in discovery to the defense. I mean 
I can go through them one by one, I thought in abundance 
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of facilitating the hearing, I would offer them in bulk. 

THE COURT: Any further reply, Mr. Swift? 

MR. SWIFT: Yes, Your Honor, why they do appear 
to be documents we previously received, we received 
hundreds of thousands of documents off of this computer. 
Many of which I don't believe are relevant to the 
particular issues here. I would ask that rather than 
blanketly — I do not believe because a document was 
seized off Mr. Brown's computer it is necessary to 
sentencing. That is the proposition that the government 
puts forth: I seized these documents off of Mr. Brown's 
computer, therefore they are relevant. I believe that a 
little more foundation needs to be set other than that. 

THE COURT: Anything final, Ms. Heath, as to your 
request for admission of these documents? 

MS. HEATH: I can ask the agent a couple more 
questions regarding the documents. 

THE COURT: All right, let's see about laying 
more of a predicate, and we will go from there and see if 
Mr. Swift renews his objection or the predicate satisfies 
his concerns . 

Q. (BY MS. HEATH) With regard to these documents. Agent 
Smith, do they deal with e-mails and/or IRC charts 
regarding Project PM, one of the entities that is 
attributed to Barrett Brown? 
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A. Yes, they do. 

Q. Do the e-mails and chats also refer to occasions when 
Mr. Brown refers to himself as the spokesman or 
unofficial spokesperson for Anonymous? 
A. Yes, they do. 

Q. Are there e-mails and chats where Mr. Brown is 

referring to himself as a former journalist or 

psuedo- j ournali St , but not currently a journalist during 

the periods of time from 2011 and early 2012? 

A . Yes . 

Q. Are there e-mails and IRC chats with regard to 
Mr. Brown explaining what his role in Anonymous and/or 
any of the smaller groups such as being a strategist, 
theorist, targeting individuals, things like that? 
A . Yes . 

Q. Are there chats and e-mails regarding Mr. Barrett 
recruiting individuals with Anonymous and/or Project PM? 
A. Yes, I think there are. 

Q. And also and all this is related to the relevant 
conduct. Are there also chats and IRC discussions 
concerning Mr. Brown's acquisition of and requesting of 
credit card information and other personal identifiers of 
individuals ? 
A. Yes, there are. 

Q. With regard to the few items you got from the 

Charyse C. Crawford, CSR, RPR 
1100 Commerce, Room 1544, Dallas, Texas 75242 
(214)753-2373 Telephone 
Charyse_Crawford@txnd.uscourts.gov or charysecrawford@gmail.com 



1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 



29 



internet, was one of them the NBC Nightly News? 
A. Yes, ma'am, it was one of the items. 
Q. And that was a video of Mr. Brown's interview? 
A . Correct . 

Q. Did it also include some Pastebin or other screen 
shots from the internet related to references to those 
screen shots in either Twitter accounts or e-mails or the 
IRC chat? 

A. My recollection is they did have screen shots that 
showed links to content and such. 

MS. HEATH: Your Honor, again, the government 
would offer Government's Exhibit Nos . 1 through I believe 
I said — actually, it is 61 — I am sorry — 
Government's Exhibit Nos. 1 through 62 absent number 10 
and absent number 42. 

THE COURT: All right, any objection, 
Mr. Swift? 

MR. SWIFT: My objection stands I think they need 
to be laid individually. 

THE COURT: All right, we can do it the hard 
way. Let's move forward. Counsel approach the bench. 

(THE FOLLOWING PROCEEDINGS WERE HAD AT THE BENCH, 
WITH ALL COUNSEL PRESENT.) 

THE COURT: Okay, Mr. Swift, Ms. Heath went over 
five different areas concerning the e-mails and chats. 

Charyse C. Crawford, CSR, RPR 
1100 Commerce, Room 1544, Dallas, Texas 75242 
(214)753-2373 Telephone 
Charyse_Crawford@txnd.uscourts.gov or charysecrawford@gmail.com 



1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 



30 



MR. SWIFT: Yes. 

THE COURT: From the Court's perspective it 
seems relevant to the issues in this case and issues of 
sentencing . 

Now, are there documents, Ms. Heath, in this 
collection. Exhibits 1 through 62, less Exhibits 10 and 
42 that do not pertain to those topics that you asked 
Agent Smith about? 

MS. HEATH: Full e-mails may contain discussions 
about other things, but what we are focused on in the 
e-mail will be those statements that we refer to. We 
have the complete e-mail, but we would only be 
referencing those statements that I referenced such as 
the e-mail that may be five pages long we are referring 
to one page of it. We can always redact if the Court 
deems necessary. For completeness, I included the entire 
e-mail . 

THE COURT: Here is the problem. We can do a 
blow-by-blow account exhibit for exhibit, but we will be 
here for two or three weeks doing that. Is that the 
approach that defense wants? Now, I will agree with you, 
Mr. Swift, that it needs to relate to what is relevant in 
this case, and I thought she was making an attempt to 
narrow the information to those five or six areas in 
which she inquired. That is all I am interested in. I 
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am not interested in the stuff beyond that. 

MR. SWIFT: The difficulty. Your Honor, if I 
agree to the entrance, then I am not objecting. I have 
not gone through all of them. I am not — I just over 
time my version of what is relevant and the government's 
version of what is relevant is sometimes different, and I 
can suggest perhaps a 20-minute recess. I need time to 
read these. I could do it on the fly if they are handing 
it down, but I have 51 documents I am supposed to agree 
to and that is almost malpractice with 51 documents. I 
have not read all of them, but I agree to admissibility. 
How could I do that? I understand the Court's position. 
I am just put in a position. In my entire practice, I 
have never had 51 documents blanketly admitted as 
exhibits, 1 through 51 that I received on that morning as 
opposed to single exhibits. 

THE COURT: Well, I have allowed it under the 
condition that the parties have discussed them and they 
have come to some agreement. I have preadmitted exhibits 
more than that . 

MR. SWIFT: Yes, I have too, but I have not done 
that in this case. I have not done that. 

THE COURT: All right, so the question then is 
this. As stated before, we can do at this time hard way, 
the difficult way, or we can do it exhibit by exhibit. 
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MR. SWIFT: I probably can read faster. Could I 
have a 20-minute break to see if I have specific 
objections? Otherwise, I am stuck with a blanket and I 
don't want to waste the Court's time and when comes down 
to it, I had two objections out of 51, but I can't on the 
fly do this and go through them. I am sorry. Your Honor, 
I think that is the best way I have. 

THE COURT: Are you talking about a 20- or 
30-minute break to review those? 

MR. SWIFT: Right. I will go through and see if 
we have objections, and I will be able to articulate 
them . 

THE COURT: You are talking about 30 minutes to 
review those, then that is probably more productive or 
more efficient than introducing each exhibit one by one. 
Now, if you are going to have 30 minutes and we still 
have objections as to all exhibits, then no purpose is 
served . 

MR. SWIFT: No, after the 20 minutes is over, I 
will articulate specific objections to documents. In 
other words I will — I will be objecting to 15, 17, I am 
guessing, 22, 37, and 40 based upon these grounds or 
based upon relevance and if the government wants to lay a 
foundation they lay a foundation for those five, and I 
have agreed to everything else. 
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What I am asking is time to read through it and see 
if I can't do exactly what we normally do in a pre-trial 
come to an agreement on them. One would expect because 
they do have clients. I don't know whether the 
government is going, and I know the Court ' s view on 
relevance in this, that I will probably be able to agree 
to the vast majority, but I do not know that until I read 
them . 

THE COURT: I guess the other question I have for 
you, Ms. Heath, is this. Are any of those exhibits 
cumulative or unnecessary? I mean I know what you are 
trying to establish, but you have made your point with 
three or four exhibits. Is it necessary to add four or 
five more of the same nature? I am asking you. I am not 
telling you how to try your case. Sometimes, there is 
overkill by both sides. Once a point is established, 
they are sort of piling on, so — 

MS. HEATH: Obviously, if the documents are 
admitted, the Court can go over them at its leisure. At 
some point later today if it wants to do that and we can 
addr e s s . 

THE COURT: I hope to finish this hearing 
today. I was told it was going to last three hours. I 
am beginning to question that now. 

MS. HEATH: Right. 
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THE COURT: I do have a busy docket tomorrow. 

MS. HEATH: What I meant was yes, there may be a 
need to only go through certain of the documents, I mean 
— they may be the same issue, but related to different 
companies that were victimized but the same issue. 

THE COURT: Okay, let's do this. Okay, let's do 
this. Let's take a 30-minute break. Let me tell Counsel 
for both sides this. Are there any other exhibits? 
Let's get them in the open now. 

MS. HEATH: That's it. 

THE COURT: Does the defense have any? 
MR. SWIFT: I will have to see. 

THE COURT: Are you going to have any exhibits? 
MR. SWIFT: We are going to have testimony, and 
we potentially could have IRC chats. 

THE COURT: A couple of what? 

MR. SWIFT: IRC chats. They may be in here. I 
don ' t know . 

THE COURT: All right, let's do this then. Let's 
take a 30-minute recess, and you and Ms. Heath get 
together and see which exhibits there can be an agreement 
on, and we can move forward on like that. If there is 
objection to specific exhibits, we will take them up at 
the time. What I want you to do is see how many you can 
agree on. If there is an objection, the Court will deal 
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with it . 

MS. HEATH: Yes, Your Honor. 

MR. SWIFT: Yes, Your Honor. 
(THE FOLLOWING PROCEEDINGS WERE HAD IN OPEN COURT, WITH 
ALL PARTIES AND COUNSEL PRESENT.) 

THE COURT: All right, based upon bench 
conference, the Court is going to allow a 30-minute break 
for Defense Counsel to review those exhibits. There are 
some 52 exhibits, less two. It is really a total of 50 
exhibits. The Court agrees that Defense Counsel needs 
time to look at those exhibits. 

The Court instructs Counsel after he has reviewed 
those exhibits to confer with the government's Counsel, 
Ms. Heath, and see how much agreement can be reached with 
respect to those exhibits. We will be in recess for 30 
minute s . 

THE COURT SECURITY OFFICER: All rise. 
(A RECESS WAS HAD, AFTER WHICH THE FOLLOWING 
PROCEEDINGS WERE HAD IN OPEN COURT, WITH ALL PARTIES AND 
COUNSEL PRESENT.) 

THE COURT: All right. Counsel, has there been 
any agreement reached as to the exhibits in question? 

MS. HEATH: Your Honor, let me clarify for the 
record. I think I misspoke earlier. It would be 
Government's Exhibit No. 1 through 61, and 61 is actually 
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the video absent number 10 and absent 44. I had the 
wrong numbers there . 

THE COURT: Earlier you said 10 and 42, but it 
should be Exhibit No. 10 and No. 44? 

MS. HEATH: Correct. 

THE COURT: We are talking about Government's 
Exhibit Nos. 1 through 51, except for Exhibits 10 and 44; 
is that correct? 

MS. HEATH: Yes, Your Honor. 

THE COURT: All right, Mr. Swift. 

MR. SWIFT: I have objections. The government 
did not indicate that it agreed to redact these 
documents, so I am going to state for the record my 
objections. I can object now. 

THE COURT: Do you have objections to all of the 

exhibit s ? 

MR. SWIFT: No. 

THE COURT: Tell me which ones to which there is 
no objection first. 

MR. SWIFT: There is no objection through Exhibit 

No. 33. 

THE COURT: All right, so 1 through 32 there is 
no objection; is that correct? 
MR. SWIFT: Yes. 

THE COURT: For purposes of this hearing 
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Government's Exhibits 1 through 32 are admitted with no 
objection. Tell me which other exhibits there is no 
objection . 

MR. SWIFT: There is no objection to Government's 
Exhibit No. 35, Government's Exhibit No. 36. There is 
objection — 

THE COURT: No. Go through all the ones there is 
no objection, and we will deal with the others. 

MR. SWIFT: Yes, Your Honor, there is no 
objection to Government's Exhibit Nos . 46 through 61. 

THE COURT: All right, just so the record is 
clear there is no objection to Government's Exhibit No. 1 
through 32 which have been admitted. There is no 
objection — did you include 33 or not? 

MR. SWIFT: I object to 33. 

THE COURT: There is no objection to 
Government's Exhibit No. 1 through 32 which have been 
admitted. There is no objection to Government's Exhibit 
No. 35, 36, and 46 through 61. Did I state that 
correctly, Mr. Swift? 

MR. SWIFT: You did. Your Honor. 

THE COURT: All right, that being the case. 
Government's Exhibit Nos. 34, 35, 36, and 46 through 61, 
those exhibits are admitted into evidence along with 
those previously stated by the Court which include 
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Government's Exhibit No. 1 through 32. 

All right, just one minute, please. All right there 
is an objection by the defense to Government's Exhibit 
No. 33. What is your objection, Mr. Swift? 

MR. SWIFT: Relevance. If we take a look at 
Government's Exhibit No. 33, the subject is Shell Oil. 
If Your Honor takes a look at the text, it includes Shell 
Oil. I am in no way understanding that Shell Oil is the 
victim in this case, that they were hacked or in any way 
does the PSR suggest such a part. 

THE COURT: Ms. Heath, what is the relevance? 

MS. HEATH: Your Honor, actually, all but one of 
the items that he is objecting to are Barrett Brown 
targeting potential victims. In this case, he does say 
in an e-mail from him to another person, he identifies a 
target for an attack which would go to relevant conduct 
which includes Mr. Brown's role in the offense. 

MR. SWIFT: Our contention is this one actually 
goes to targeting in a sense of arguing for op-ed, 
e-mails, or that sort of thing, that such a person should 
be castigated. I don't believe it sets out anything. 
They are not an appropriate victim. 

THE COURT: Ms. Heath, expand on your argument 
as to relevant conduct . 

MS. HEATH: Your Honor, with regard to relevant 

Charyse C. Crawford, CSR, RPR 
1100 Commerce, Room 1544, Dallas, Texas 75242 
(214)753-2373 Telephone 
Charyse_Crawford@txnd.uscourts.gov or charysecrawford@gmail.com 



1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 



39 



conduct, it is important to see what Mr. Brown's role was 
in the offenses related to the instant offense to which 
he pled guilty. In this case, Mr. Brown as one of his 
roles in Anonymous was helping to target entities, 
corporations, individuals for the attention of Anonymous, 
which generally involved some sort of hacking, DDOS 
attacks, doxing, posting public information, or posting 
private information in a public forum, and so the 
Exhibits 33, 34, 37 through 43 which the defense is 
objecting to, those all go to targeting various targets 
on behalf of Anonymous . 

MR. SWIFT: Your Honor, Mr. Brown has pled and 
being sentenced for accessory after the fact in this 
case. The accessory after the fact has for its potential 
relevant victims of the actual crime. That is what is 
before the Court, the relevant conduct. 

None of these parties were ever victims. None of 
these parties relate to prove any fact at issue. It is 
not relevant . 

THE COURT: All right, just one minute. 
(PAUSE IN PROCEEDINGS.) 

THE COURT: Okay, Mr. Swift, are 34 through 37 

the same? 

MR. SWIFT: The same objection, identifies as no 
relevance as to identified victim, no relevance to anyone 
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who has ever been identified as a victim. I try — 

THE COURT: Well, is the relevance for other 
reasons or not? I mean, for example, let's look at 
Exhibit No. 33. I know there are some objections as to 
relevance made generally to the pre-sentence report. I 
think one objection is that the defense stated that the 
pre-sentence report overstated Mr. Brown's role with 
respect to Anonymous, but Exhibit No. 33 says — excuse 
me — not 33, 34 talks about my Anon Group, quote, 
unquote . 

I tell you what I am going to do with respect to 
these exhibits. I think there is perhaps some degree of 
relevance. I think really the objection may be more as 
to the weight of the evidence as opposed to the 
relevance, and even if it does not relate to the victims, 
I think it is relevant to Mr. Brown's involvement with 
Anonymous . 

The Court is going to overrule the objections made 
by the Defense with respect to Exhibits 33, 34, 37 
through 46. Let's move forward. 

Q. (BY MS. HEATH) Agent Smith, let's go ahead and jump 
right into these exhibits. Exhibit No. 1, if you could 
look at that, page 2, in the middle of the page, this is 
an e-mail from Barrett Brown; is that correct? 
A . Yes , ma ' am . 

Charyse C. Crawford, CSR, RPR 
1100 Commerce, Room 1544, Dallas, Texas 75242 
(214)753-2373 Telephone 
Charyse_Crawford@txnd.uscourts.gov or charysecrawford@gmail.com 



1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 



41 



Q. And in this he is talking about his Project PM? 

A . Yes, ma ' am . 

Q. What is Project PM? 

A. Project PM was a group I understand that he founded 

that was an associated group with Anonymous. 

Q. Was there a time Project PM split into two separate 

groups ? 

A. Yes, that is correct, around the time of this e-mail 
that occurred. 

Q. And in this e-mail, if you could read the paragraph 
talking about splitting into two entities from Barrett 
Brown, that one paragraph? 
A. Starting with "Clark?" 
Q . Yes . 

A. "Clark, it's about time for Project PM to split into 
two entities, one which I will continue to lead, and one 
with those who would prefer to stay out of the war that I 
have been prepping for over the last year. Obviously, 
Scott is left, and Campbell is getting uncomfortable and 
I want our plans to continue. I would like for you to 
take over the legal faction in quotations or ask Campbell 
or someone else to do so." 

Q. If you could go to Exhibit No. 2, is this a chat also 
discussing dividing Project PM into two factions? 
A . Yes . 
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Q. You go to the middle, who is "me" in the chat? 

A. This chat is from the point of view of Barrett Brown, 

Barrett Brown ' s account . 

Q. So the me is Barrett Brown? 

A . Correct . 

Q. In the section starting me, I have split Project PM, 
could you read the three lines by "Me," by Barrett Brown? 
A. Yes. "I have split Project PM into two organizations 
one will be led by Campbell Vertesi and will continue the 
other projects. The other will continue with me and will 
be involved in revolutionary activities in conjunction 
with people from Anonymous." 

Q. Go down to the next four "Mes," starting with it 
means various and read those. 

A. Okay. "It means various nonviolent activities that 
violate the laws of various dictatorships such as those 
in Egypt where we took down government websites as well 
as in the U.S. See HBGary Federal. Check the news." 
Q. And HBGary Federal is the entity that you talked 
about earlier that actually closed down because of 
attacks by Anonymous? 
A. That's correct. 

Q. If you would go to page 2 of Government's Exhibit No. 
2 at the very top and read two lines starting with 
Anonymous has become. 
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A. "Anonymous has become rather powerful, and I am close 
to everyone involved." 

Q. And if you go down to Me, people will, and read that 
line. 

A. People will die? 
Q . Yes . 

A. "People will die because of what we are going to do." 
Q. And further down, suffice it to say. 

A. "Suffice it to say, we are capable of all kinds of 
things now." 

Q. If you go to page 3 on Government's Exhibit No. 2, a 
little further than half way down the page. Me, at any 
rate; please read those three lines. 

A. "At any rate, the other Project PM, the quote, 

unquote, legal faction is safe, does everything openly. 
I am no longer associated with it." 

Q. If you could go down to the very bottom of the page 
where the person he is talking asks him a question. Could 
you read the question and then his answer? 
A. "If you don't mind me asking, was there a divisive 
reason as to why you are no longer associated with PM or 
you just couldn't resist the allure of being part of this 
transnational revolution." He replies, "Oh, I split it 
into two the other day because several people are nervous 
about associating with Anon at this time, and in order to 
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protect them, as well as the scientists, this is the best 
opt i on . " 

Q. And then if you turn to the next page, the last page. 
Government's Exhibit No. 2, the very last line by "Me" is 
he's indicating that he was happy to recruit. 
A. I am sorry. What? 

Q. The very last line by Barrett Brown. 
A. "Always happy to try to recruit." 

Q. If we could go to Government's Exhibit No. 3, and 
again, this is during the time of Project PM splitting; 
is that correct? 
A . Yes . 

Q. And this is an e-mail from Barrett Brown. If you 
could please read the first two sentences in the e-mail? 
A. "Howdy. As some of you know, due to my having taken 
a more central role in Anonymous in the past few months, 
I am splitting Project PM into two different groups. One 
will continue with my myself, a group of PM folks, and 
Anonymous will continue pursuing project aid for Africa 
and the Middle East. We will also carry on with things 
like HBGary, and for those who are uncomfortable with 
these newer projects for any reason can work with 
Campbell Vertesi, Clark Robinson, and a number of PM 
folks, as well as whomever else joins them as recruiting 
continues . " 
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Q. If you go to Government's Exhibit No. 4 is this a 

chat between Barrett Brown and another person? 
A . It is . 

Q. In the beginning of the chat, does Barrett Brown post 
an article in Forbes? 
A . Yes . 

Q. And the article in Forbes according to the link is 
titled what? 

A. The link ends with "Anonymous Hackers Target Alleged 

WikiLeaker Bradley Manning's Jailers." 

Q. At this point was Bradley Manning in custody? 

A . Yes, he wa s . 

Q. Were there issues that you observed in Mr. Brown's 
communication where he or other people were contesting 
the conditions that Bradley Manning was held? 
A. I think he was not happy with the conditions of his 
confinement . 

Q. In the middle of this chat, there is a reference to 
Isikoff . Could you read those two sentences? 
A. Yes. Starting with Isikoff? 
Q . Yes . 

A. "Isikoff came down with camera crews to interview me 
last week. The segment will appear on NBC properties 
soon, also I'm probably going to be hit by the feds." 
Q. And then the next two lines by Me, by Barrett Brown. 
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A. "I have been Anon for five, six years, came out two 
months ago. I have got a plan." 

Q. Later on, does Mr. Brown indicate what Project PM's 
relationships to Anonymous is? 

A. So in response to that question, Mr. Brown answers 
it's laundered people for Anonymous among other things. 
Q. And this was Project PM? 
A . Correct . 

Q. Now, with regard to the NBC Nightly News, was that an 
interview given by Mr. Barrett Brown? 
A . Yes . 

Q. Was it in his apartment in the Dallas area? 
A . Yes . 

MS. HEATH: The government would request to play 
this video. It's only a three-minute video. 
THE COURT: All right. 
(THEREUPON, THE VIDEOTAPE WAS PLAYED IN OPEN COURT.) 

MS. HEATH: There is a video that goes with it. 
(THEREUPON, THE VIDEOTAPE WAS PLAYED IN OPEN COURT.) 
MS. HEATH: Your Honor, I will come back to 
this, close it and restart it, and we will come back to 
this . 

THE COURT: All right. 
Q. (BY MS. HEATH) Going to Exhibit No. 5, this is an 
e-mail from Barrett Brown, and just read the first 
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sentence ? 

A. "Barrett Brown here. Anonymous spokesman and 
strategist, et cetera." 

Q. And if we can go to page — go to Exhibit No. 6, 
another e-mail from Barrett Brown. What is his — the 
very first line in the e-mail? 

A. It says, "yes, I am also a strategist and legal 
organizer. I don't hack, though." 

Q. Was that in response to a question, can we refer to 
you as the informal spokesman for Anonymous? 
A . Yes . 

Q. Further down in the e-mail, does he give a 
chronological account of what website takedowns have 
occurred? 

A. Yes, he lists several sites. 

Q. And there are 1, 2, 3, 4, 5, 6, 7 sites listed there? 
A . Yes . 

Q. If we could go to Government's Exhibit No. 7. This 
e-mail is titled Barron Barr Anonymous. If you could 
read the first half of the line that begins the e-mail. 
A. I am sort of — let me start over. "I am sort of 
spoke sman / St rat egi st for Anonymous." 

Q. Go down to the second sentence, happen to come 
across . 

A. "I happen to come across your e-mail address while 
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going through the e-mails we acquired from HBGary during 
our investigation and during their surveillance of our 
movements, and I wanted to get in touch to see if you 
might be interested in talking about what has been 
happening during the community and our people." 

MS. HEATH: I believe we have Government's 
Exhibit No. 61 ready to go. 

(THEREUPON, THE TAPE WAS PLAYED IN OPEN COURT.) 
Q. (BY MS. HEATH) With regard to the HBGary reference, 
there is some additional documents that come across a 
little later that has the HBGary reference; is that 
correct ? 
A . Yes . 

Q. Let me go back to Government's Exhibit No. 8 where 
Barrett Brown says he is the informal strategist and 
spokesperson for Anonymous? 
A . Yes . 

Q. Exhibit No. 9 is a chat; is that correct? 
A . Yes . 

Q. And in there he is identifying himself as one of the 
informal spokesman and strategist; is that correct, in 
the middle of the page? 
A . Yes . 

Q. And then further down right after a response by the 
person he is talking to, he states, and we are the most 
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effective, if you could read that line. 
A. I am sorry? 

Q. And we are the most effective process. 
A. Is it on the same page? 

Q. Government's Exhibit No. 9, half way down? 

A. And we are the most effective process by which to 

smash the institutions that need smashed. 

Q. Go to Government's Exhibit No. 11. Was that 

discussing taking down the Algerian websites? 

A . Yes . 

Q. And then Barrett Brown also indicates that he is 
helping to direct and service spokespersons for the 
Anonymous OPs; is that correct? 
A . Yes . 

Q. When things are referred to as OPs, what is that? 
A. I understand that to be an operation. 

Q. Is that how many of the target or focuses of action 
are titled like OP HBGary? 
A . Yes . 

Q. Government's Exhibit No. 12, does this indicate that 
Mr. Brown in his own words as a former journalist who 
serves as advisor to the Anonymous movement? 
A . Yes . 

Q. Government's Exhibit No. 13, does he indicate he is a 
pseudo journalist and activist attached to Anonymous? 
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A . Yes . 

Q. That he is a former journalist who currently serves 
as sort of a strategist, theorist, and spokesman for 
Anonymous ? 
A . Yes . 

Q. Government's Exhibit No. 15, does Mr. Brown in this 
e-mail state in his own words that I am sort of a 
p seudo- j ournali s t , formerly a real journalist, and does 
he indicate that he left that life to be with Anonymous? 
A . Yes . 

Q. Further down in the paragraph, he starts my goal is 
absolute dramatic reform; do you see that? 
A. In the first paragraph? 
Q . Yes . 
A . Yes . 

Q. Could you read that? 

A. "Absolute dramatic reform of governments starting 
with the most oppressive as well as rooting out of 
corruption at high levels here in the U.S. I come from a 
— I come from a military family, but did not serve. I 
consider Anonymous to be the world's most ethical and 
effective army, increasingly so anyway, and it is the 
only thing I've ever felt proud of being a part of 
because from what I have seen from those with the 
influence to move it in its current direction." 
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Q. And further down on the second paragraph where it 
starts right smack in the middle of the second paragraph, 
note that neither I, could you please read the two 
sentences there? 

A. I am sorry. "Note that neither I nor anyone else can 

really speak for Anon, though. It is simply that some of 

us are more active and make our cases better and thereby 

convince others to join in certain tasks." 

Q. Could you read the next sentence, please? 

A. "We are an ebb and flow of relationships, a sort of 

process at war with those institutions that we consider 

to be dangerous." 

Q. If we go to Exhibit No. 16, is that a short e-mail 
from Barrett Brown again where he is saying he's a former 
journalist and currently serves as an operative for the 
Anonymous collective? 
A . Yes . 

Q. Government's Exhibit No. 17, Barrett Brown states he 
is a former journalist currently working with Anonymous 
collect ive ? 
A . Yes . 

Q. Government's Exhibit Nos. 18 and 19 both saying that 
Barrett Brown is a former journalist; is that correct? 
A . Yes . 

Q. And 18 actually states he is a current agitator? 
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A . Yes . 

Q. In the first sentence of Mr. Brown's communication, 
does he say that "we've effectively gained control of 
Anonymous ? " 
A . Yes . 

Q. "And will keep control until such time as it is 
reformed . " 
A . Yes . 

Q. And then his last sentence prior to his links, "we're 
in even firmer control than yesterday." 
A . Yes . 

Q. Government's Exhibit No. 21, does Mr. Barrett Brown 
say he is heavily involved in strategy and media and 
running legal defense? 
A . Yes . 

Q. He has much more control now? 
A . Yes . 

Q. Government's Exhibit No. 22, the second sentence, 
"Anonymous needs to be run properly, and I am the only 
one who can ensure that this happens at the moment." 
A . Yes . 

Q. Government's Exhibit No. 23, in the first sentence, 
Mr. Brown states that he serves as an advisor to 
Anonymous ? 
A . Yes . 
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Q. Government's Exhibit No. 24, does he indicate he sort 
of serves as strategist, IRL troll, and theorist? 
A . Yes . 

Q. And that is for Anonymous; is that correct? 
A . Yes . 

Q. Then Government's Exhibit No. 25, does Mr. Brown 
state in his own words, I am sort of a forward engineer 
for Anonymous and a former journalist? 
A . Yes . 

Q. Now, Government's Exhibit No. 26, does this appear to 
be an interview in writing through the e-mail? 
A . It doe s . 

Q. And Mr. Brown is answering questions; is that 
correct ? 

A. That's correct. 

Q. The first question is asking if the Church of 
Scientology was Anon ' s first public target; is that 
correct ? 

A. That is the question. 

Q. What was Mr. Brown's response? 

A. He said it was not our first public target. Hal 
Turner was hit before Scientology. 

Q. And then in the question number 2, he is asked if he 
is a self-described anarchist, but would Anonymous ever 
define itself that way. What was his answer to that? 
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A. His response was, "Anonymous doesn't like to define 
itself and my anarchism is my own" is the whole sentence. 
Q. Question number 4, which is on page 2 of Exhibit 
No. 26, he is asked about botnet . What is "botnet?" 
A. A botnet is a collection of computers that can be 
centrally controlled. 

Q. Are botnets involuntarily taken over or voluntarily 

taken over or both? 

A. I would have to say both. 

Q. And in this question he is asked about to clarify a 
statement that he had made previous that voluntary 
botnets were used for DDOS attacks; is that correct? 
A . Yes . 

Q. What does he respond? 
A. Yes, voluntary zombies. 

Q. What is his final word in this e-mail interview? 

A. "Anonymous is a process at war with a system." 

Q. Government's Exhibit No. 27, does he indicate that 

Anonymous is not comprised of hackers, but he merely used 

hackers ? 

A . Yes . 

Q. Government's Exhibit No. 28, would you please read 
the first two sentences of Mr. Barrett Brown's own words 
in this e-mail? 

A. "Well, when we take down the site, the press pays 
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attention, and thus read our manifestos or come to us 
asking us why we did it. Then we explain what misconduct 
our targets engaged in and that is subsequently printed." 
Q. And again, this is seemingly an e-mail with questions 
and answers; is that correct? 
A . Yes . 

Q. Go to page 2 in the middle of the page. Mr. Brown 
starts, my role in Anonymous. Can you please read that 
sentence? 

A. "My role in Anonymous is unusual in so much as I was 
involved in the culture from 2006 on in various 
capacities and at some point began writing about it in my 
capacity as a journalist while also still participating 
to some degree." 

Q. Later, he indicates I think the next sentence or two 
down, "I join the Anon OPs server under my own name when 
OpTunisia began." 
A . Yes . 

Q. What is the Anon Ops server? 

A. I understand it's an IRC server associated with 
coordination of operations. 

Q. Were there many different channels or servers used 
for the Anonymous participants to communicate with one 
another ? 

A. There were several servers and several channels. 
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Q. Were some of the channels identified as the 
operations that they were discussing? 
A . Yes . 

Q. Like Op Tunisia, they may be discussing Op Tunisia? 
A . Yes . 

Q. Further down in that paragraph in Government's 
Exhibit No. 28 on the second page he says I was also 
involved in the HBGary Operation; did you see that? 
A . Yes . 

Q. Could you read that sentence? 

A. I was involved in the HBGary Operation in a couple of 
capacities most notably by reporting a conversation with 
Aaron Barr which I ran an op-ed I did for The Guardian. 
Q. If you could turn to page 3 of Government's Exhibit 
No. 28, the next page towards the bottom of the page he 
is asked about using DDOS . What is DDOS? 
A. Distribute, denial of service. 
Q. What exactly is that? 

A. The technique for overwhelming the resources of a 
target . 

Q. What does Mr. Brown say about DDOS? 
A. DDOS will always have its place in our arsenal, 
particularly, because its successful attack gives us a 
chance to explain why we are attacking to begin with thus 
we are able to bring attention to the targets of our 
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conduct . 

Q. What is the next sentence there? 

A. I do think the attacks on Visa, et al, brought 
attention to the cynical decision from customers donating 
to WikiLeaks . 

Q. Was Visa attacked at some point in 2011? 

A. It is my understanding they were attacked. I am not 

sure of the exact time of that attack. 

Q. Go to Government's Exhibit No. 29 and start on the 
second page. Mr. Brown indicates that he is not the 
leader of Anonymous; is that correct? 
A . Yes . 

Q. But he does go on to explain what his function is in 
this e-mail. What did he say? 

A. He says my function is equivalent to that of a 
propagandist, strategist, and theorist. My influence 
over the movement is up for debate and is at any rate 
fluid. 

Q. That last paragraph on that same page, does he 
indicate how long he had been involved in the Anonymous 
culture ? 
A . Six years . 

Q. Does he indicate how long he has been an anarchist in 
that last paragraph that last line? 
A. Since his early teen years. 
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MR. SWIFT: Objection; relevance, anarchist? 

THE COURT: You objected to the question because 
the exhibit has been admitted. What are you objecting 
to? 

MR. SWIFT: I am objecting to question and 
anarchist. There may be something in the documents that 
are marginally relevant. I don't understand what 
anarchist has to do with number of victims or trading in 
credit card technology secrets that makes a fact more 
probable. It is however prejudicial. 

THE COURT: Well, we are not in a jury trial and, 
frankly speaking, insofar as sentencing, I don't know if 
it is relevant to my determination. What I am looking 
for to be quite honest with you is looking for relevant 
conduct, and I am looking for things like victims, and I 
will tell you this, Mr. Swift, I do not plan to consider 
that in my sentencing, so we will move on. 

MR. SWIFT: Yes, Your Honor. 
Q. (BY MS. HEATH) We can go to page 3, Government's 
Exhibit No. 29, the second paragraph down is Mr. Brown's 
statement, participants within Anonymous have committed 
crimes ? 

A. I am sorry. Which page are you on? 

Q. Page 3 of Government's Exhibit No. 29, second 

paragraph that starts "gray hat." 
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A. Okay. 

Q. Participants within Anonymous have committed crimes. 
A . Yes . 

Q. Next line, we target those who themselves have done 
wrong ? 
A . Yes . 

Q. Further down in the middle of the pages, currently, 
we are investigating several issues related to the 
intelligence community; do you see that? 
A . Yes . 

Q. If we could go to the last page of Government's 
Exhibit No. 29, first full paragraph, Mr. Brown indicates 
a voluntary botnet was used for DDOS attacks? 
A . Yes . 

Q. What is Mr. Brown's final line in the general 
question, do you have anything else you would like to 
share? You can skip over the obscenities. 

A. "Yes. Booz Allen Hamilton and certain other parties 
have no blanking idea how hard they are about to get hit 
from several directions." 

Q. Government's Exhibit No. 30, does it appear to be an 
e-mail from Barrett Brown to a number of people with the 
extension at qorvis.com? 
A . Yes . 

Q. In this, is Barrett Brown asking if any of them would 
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like to speak to him off the record about Qorvis' 

operations ? 

A. Yes, he is asking if they would like to speak to him 
to avoid being personally targeted. 

Q. And does he indicate that Anonymous is getting ready 
or I am getting ready to launch via Anonymous and my own 
organization, a massive anti-PR campaign? 
A . Yes . 

Q. Government's Exhibit No. 31 is a chat with 0; is that 
correct ? 
A . Yes . 

Q. And who is 0? 

A. I understand 0 to be the alias of Jeremy Hammond. 
THE COURT: To be a what? 

THE WITNESS: To be an alias Jeremy Hammond. 
Q. (BY MS. HEATH) Is that the individual with whom 
Barrett Brown has pled guilty to being an accessory after 
the fact to Mr. Hammond's activities? 
A . Yes . 

Q. And those activities related to Stratfor at that 
t ime ? 

A. That's correct. 

Q. With regard to Mr. Brown's conversation with 0, what 

is Mr. Brown telling 0 in this chat? 

A. He is telling 0 that this company Qorvis has 
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vulnerabilities . 

Q. He says Qorvis has v-u-l-n-s? What does v-u-l-n-s? 

A. Vulnerabilities. 

Q. What is vulnerability? 

A. My understanding is that he is referencing faults in 
the software on the computer systems that could 
potentially be exploited. 

Q. Is he asking if there is another member that he 

identifies as Elche capable of handling it? 

A. Yes, he asked that question. 

Q. Does 0 inquire about the vulnerability? 

A. Yes, he inquires about the nature of the 

vulnerability. 

Q. Does Barrett Brown tell him about the nature of the 

vulnerability? 

A . Yes . 

Q. Do they leave this conversation to follow up on it 
later? 

A. Well, I think there is some concern about talking 
about live vulnerabilities in this conversation, yes. 
Q. What is said about that? 

A. He admonishes Mr. Brown and suggested that he start 

using SSL . 

Q. What is SSL? 

A. Secure Sockets Layer encryption for the connection. 
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Q. So basically, he is not wanting to talk without 
Mr. Brown using a secure communication format? 
A . Yes . 

Q. Government's Exhibit No. 32, the subject line is 
possible Shell Oil Op; is that correct? 
A . Yes . 

Q. And in Government's Exhibit No. 32 in the first 
paragraph he describes in the middle, I am hoping to keep 
Project PM viable; do you see that? 
A . Yes . 

Q. Could you read that to the end of that one paragraph? 
A. "I am hoping to keep Project PM viable as a means of 
at least keeping some media focus on the cyber-indust rial 
complex and all that, and like a number of other people, 
I'm not entirely ready to give up on Anonymous just yet, 
but realistically, I think the way forward is with 
smaller groups established with some degree of operating 
procedures and intent, established by its founder." 
Q. Exhibit No. 33, is this a follow-up on the same 
concept that Shell Oil would be a better target? 
A . Yes . 

Q. And Government's Exhibit No. 34 another e-mail from 
Barrett Brown. Would you please read this one line 
e-mail ? 

A. "Not sure if you know what we did, but my Anon group 
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helped the Tunisian revolution, and I've now enlisted a 
bunch of people to continue." 

Q. And he includes a link; is that correct? 
A . Yes . 

Q. Government's Exhibit No. 35 is a chat; is that 
correct ? 

A. That's correct. 

Q. In this particular chat, if you go down halfway 
through there, he is talking about an individual, about 
how to target; is that correct? 
A . Yes . 

Q. What is the individual he is talking about, what do 
they say about targeting? 

A. It says, "Pick one target who is targeting Anonymous 
and crush them. Have people in Britain crush American 
targets and the reverse." 

Q. What is Barrett Brown's response to that? 
A. He says, "We just did. HBGary Federal and all 
execs. Booz Allen Hamilton might be next." He went on, 
"they only tell me when I need to know." 

Q. Then go to Government's Exhibit No. 36. The question 
asked of Mr. Brown in this e-mail. Was Combined Systems 
attack this morning an Anonymous attack? Looking for 
confirmation. What was Mr. Brown's response? 
A. He confirms that it was an Anonymous attack and 
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occurred last night . 

Q. And in this particular e-mail is follow up from an 
e-mail regarding Puckett and Faraj; is that correct? 
A . Yes . 

Q. And, basically the remainder of the e-mail what does 
that involve? 

A. It is an e-mail from Puckett and Faraj. 

Q. An example that was stolen from Puckett and Faraj? 

A . Yes . 

Q. And is Puckett and Faraj a law firm? 
A . Yes . 

Q. Did they basically fail after all these e-mails were 
disclosed? 

A. Yes, after this intrusion, they went out of business. 

Q. How about Exhibit No. 37, subject is Red Team; what 

does Barrett Brown say in the very first line? 

A. "Yes, going to destroy a lot of lives starting with 

Palantir, its execs and employees. This will be done in 

accordance with my expanded policy of retaliation." 

Q. Further down, he talks about I prefer shock and awe 

surprise recorded phone calls. Did Mr. Brown as part of 

his involvement with the follow up on these intrusions 

and hacks, did he make phone calls to some of the 

employees at the companies? 

A. He did on several occasions. 
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Q. Have you had an opportunity to listen to any of the 
recordings of those calls? 
A . I have . 

Q. Were those recordings found on Mr. Brown's computers? 
A . Yes . 

Q. And in general, what were the calls to the employees 
about? 

A. Well, they varied depending on who he was calling. I 
am not sure which one you are asking about, but in 
general he would represent the group that was responsible 
for the intrusion. He would sometimes make threats and 
sometimes he would invite them to confront the group. 
Sometimes he would offer to assist with an interaction 
with the group. 

Q. So there were varied reasons depending on who the 
person was what their relationship was to the company 
whether or not they were still employed by the company; 
is that correct? 
A . Yes . 

Q. Let me go to Government's Exhibit No. 38. He is 
talking to an individual here who asked him to dox some 
people; is that correct? 
A . Yes . 

Q. Is he inquiring of Barrett Brown who to dox? 
A. He is looking for direction on who to dox. 
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Q. What does Barrett Brown respond? 

A. He says, "Okay, do DEA. Some people already looking 
into it a bit, and I'm not sure what they found yet, but 
I think a surprise attack will spark significant 
discussion, et cetera, and be productive." 
Q. Does he indicate what he needs? 
A. "We need pics of head DEA people." 

Q. And do they discuss where they can post those pics? 

A. He suggests a pad. 

Q. What is a pad? 

A. An online document. 

Q. Government's Exhibit No. 39, in this e-mail, Barrett 
Brown in the second sentence discusses that he just did 
something to a friend of a certain ally. Could you read 
that line and explain what that meant, for those and 
other reasons? 

A. I am sorry. What was the question? 

Q. If you could read the line and explain what he is 
referencing here? 

A. "For those and other reasons, a friend and I just did 
this to a certain ex-ally of mine." And it has a domain 
line and URL relative, and it says "Barrett Brown 
discusses attack on that site." 

Q. And the site, who was operating that particular site 
or what was that site's reference meaning? 
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A. I am sorry. There are two sites here. Which one are 
you asking about? 

Q. The — well, I will come back to it because the next 
one actually goes to it. If we could go to Government's 
Exhibit No. 40. 
A . Yes . 

Q. Please read the first two lines — actually, the 
first three sentences by Mr. Brown? 
A. The first three sentences? 
Q . Correct . 

A. "These haven't been hacking operations, but rather 
doxxing/intel gathering operations. Quantico too." 
There is a link to piratenpad.de/master. Also, an Anon 
hacker hit Charles — sorry — victim of the site. This 
was in retaliation for some things explained partially 
here, and there is a URL. 

Q. And this person of Little Green Footballs, was this 

— was this a personal attack? 

A. I think it was a form of retaliation. 

Q. What occurred that he retaliated? 

A. My recollection is that there were a number of 

issues, but one of those was there was discussion about 

referring to the law enforcement of Mr. Brown. 

Q. Government's Exhibit No. 41, this refers to the 

Bradley Manning, is that correct, as far as the deadline 
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given ? 

A. Yes, it is. 

Q. And if you could read the first paragraph? 
A. "Yes, they have missed the deadline and our 
retribution against those responsible within the military 
will go forward at the appropriate time, which will come 
soon enough. In the meanwhile, we have expanded our 
probe of defense and Intel contractors to include Booz 
Allen Hamilton and other targets." 

Q. Government's Exhibit No. 42, Government's Exhibit No. 
42 deals with or is titled report U.S. Progressives 
Endorse Anarchist Violence at London Budget Protests. In 
this e-mail, Mr. Brown is talking about black block. 
What is "black block?" 

A. Actually, black block is a technique involving 
individuals who are dressed in black that are basically 
asserting violent acts. 

Q. Could this be during a protest of some sort? 
A . Yes . 

Q. And is Mr. Brown describing a video concerning a 
Black Block tactic? 

A. Yes, the question is if there is a black block, and 
he says, there certainly is. 

Q. If we could go to Government's Exhibit No. 43. Was 
this a document taken from Mr. Brown's computer? 
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A . Yes . 

Q. And overall, what is this document? 

A. This is a plan targeting a member of Congress. 

Q. Does it set out some key points and planned 

activities with regard to engaging in some sort of 

conduct ? 

A . Yes . 

Q. If we could go to Government's Exhibit No. 45. Does 
this appear to be recruiting an individual to work within 
Anonymous and Project PM or Project Panther Moderns? 
A. Including Project Panther Moderns. 

Q. If we could go to Government's Exhibit No. 46. Is 
this a chat with an individual known as Topiary? 
A . It is . 

Q. Who is Topiary? 

A. I understand him to be a British citizen Jake Davis. 
Q. Jake Davis, was he prosecuted? 
A . He was . 

Q. Did he plead guilty? 
A. He was convicted. 
Q . I'm sorry? 

A. He either pled guilty or was convicted. 

Q. Now, with regard to the conversation with Topiary, 

what is Mr. Brown and Topiary discussing? 

A. They are discussing the HBGary hack, in particular 
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related sites, and in the conversation Topiary says allow 
me to tweet something you will enjoy. One second, and 
then he provides a link to the Twitter account for the 
president of HBGary. 

Q. During the attack of HBGary, were they able to take 
over the Twitter account of Mr. Barr? 
A. That is my understanding they did. 

Q. So this would have been an example of taking over the 
account; is that correct? 
A . Yes . 

Q. What do they then discuss after Mr. Brown responds to 
the post? 

A. Topiary tells or explains to him more targets coming 
down and Barrett Brown says I know. Was told or — 
already told the press, and Topiary says they are going 
to release 126,000 of the e-mails, and Mr. Brown says I 
know. I haven't told details to press yet. Just showed 
them root. Can't say anything unless feds come to me. 
Q. And with regard to Mr. Brown's conversation, does he 
indicate some action he needs to take at the bottom of 
this chat? 

A. Yes, so at the end, he says, "Guess I'll start hiding 
laptops . " 

Q. Government's Exhibit No. 47, does this refer to the 
HBGary takedown? 
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A. Yes, it does. It describes what actions were taken 
against HPGary's website. 

Q. And this is Barrett Brown discussing it? 
A . Yes . 

Q. What does he say in that first portion of the e-mail? 
A. He says, "Also Anon has taken down HBGary's website, 
acquired 60,000 e-mails, destroyed backup files, acquired 
Barr ' s Twitter and more. Barr is currently in 
irc.anonops.ru pleading with us." 

Q. If you could go to page 2 of Government's Exhibit No. 
47 in the middle of the page, the bottom last sentence on 
that paragraph, "That, too, would be a secret op." Do 
you see that? 
A . Yes . 

Q. Could you read that sentence? 
A. Starting with "that too?" 
Q . Yes . 

A. "That, too, would be a secret op run out of Project 
PM until such time as our cover is blown, at which point 
Anonymous will be thrown at them. I expect those 
operations to begin in two weeks." 

Q. What operations is he speaking of there, if you can 

tell ? 

A. I think he is talking about Horchan. 

Q. Go to Government's Exhibit No. 48 which is a very, 
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very long exhibit. Basically what is Government's 
Exhibit No. 48? We won't go all the way through this. 
A. What was the question? 

Q. What is Government's Exhibit No. 48? 

A. This is an IRC log of a channel called Op HBGary, 

February 6, 2011. 

Q. And is it overseas? 

A . It is . 

Q. With regard to the individuals in the Op HBGary 
discussion, is Mr. Barrett Brown in here? 
A . Yes . 

Q. In fact, did this come from Mr. Brown's computer? 
A . Yes . 

Q. And with regard to Mr. Brown, who else is in here 
related to Anonymous or any of the subgroups of 
Anonymous ? 

A. Topiary, Sabu, TFlow, Nopants, Q. How many of these 
do you want me to read, ma'am? 

Q. With regard to the very beginning, the first couple 
of pages, is Mr. Barr the victim of an HBGary attack or 
one of the victims of an HBGary attack? Is he actually 
conversing with people in Anonymous or people in this 
room? 

A . Yes, he is. 

Q. And without going to the specifics, what basically is 
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happening in this discussion with Mr. Barr? 

A. My recollection is that they are actually confronting 
him over the document that they think he is going to give 
to them. 

Q. So HBGary — if you could explain a little background 

what HBGary did that Anonymous was upset about . 

A. My understanding is that they produced a document 

regarding Anonymous and some of the participants. 

Q. HBGary did? 

A. HBGary did. 

Q. And some of the information in that document was not 
correct according to — what he complains of? 
A. According to — yes. 

Q. Now, at this point in time, have they hacked into 
HBGary? 

A . I think, yes . 

Q. And they are — have they told Mr. Barr throughout 
this conversation that they have — they are basically 
attacking him? 

A. Yes, they basically explained why they are attacking 
him . 

Q. Okay, we are going to go to the next document. We 
may come back to this one a little later. Government's 
Exhibit No. 49 is another chat session between Barrett 
Brown and another person? 
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A . Correct . 

Q. To compare this particular chat with Government's 
Exhibit No. 48, Government's Exhibit No. 48 was a large 
room chat; is that correct? 
A. Yes, it had multiple participants. 

Q. Some of these chats we looked at are chats between 
Barrett Brown and 0, and Barrett Brown and these 
individuals, these are private chats; is that correct? 
A. That's correct. 

Q. In this particular chat, what is the topic of 
conversation. Government's Exhibit No. 49? 
A. This is a conversation between an individual who 
approaches Brown and says he has 262,000 credit cards, 
and he is asking what he can do with them. 

Q. Does Brown give him any advice as to what to do with 
the credit cards? 

A. He does. In any case, it depends on the status of 
them to an extent. You can use them for charities. If 
it becomes known that they were used for that, there 
would be chargebacks, and you would have to give the 
money back. Another option is donating to a good cause, 
something involving a revolt abroad where they are not 
going to refund the people like some charities do. For 
instance, it might be a fund for Greek anarchists or 
Syrian revolutionaries that don't give an expletive 
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whether or not the money was stolen because they've got 
more on their plate. 

Q. And then further down Barrett Brown says the key it 
seems ? 

A. "The key, it seems, to get the money to the best 
place where it would be the most effective and who won't 
give it back." And he gives a couple of references and 
says, "You might want to talk to the head of the IRC. 
They've faced the same problem." 

Q. This is regarding stolen credit cards that were 
stolen through a hack; is that correct? 
A. Yes, that is the implication. 

Q. Government's Exhibit No. 50 is another chat. Is this 
a private chat again between Mr. Hammond and Barrett 
Brown ? 

A. I understand it is. 

Q. And in this case Mr. Hammond is using the nickname 

Burn ? 

A . Yes . 

Q. What is the topic of conversation in this chat? 
A. Burn is saying he saw a company on the list which I 
understand it to be the website Echelon 2, and he said I 
passed some leads, and then he gives some accounts 
basically for individuals that companies that are 
associated with that list and includes the e-mails, the 
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log in, the e-mails IDs, the password, and in some cases 
include credit card numbers. Then there is some 
discussion about whether this has been released 
previously or if these people know if their accounts — 
their information was been compromised, and Burn makes it 
clear that it has not been released and he basically 
asked Mr. Brown if he will release this information and 
Mr. Brown says he won't release it. It's best not to 
notify the firms what we have. And he says, these people 
wouldn't know their passwords were compromised, and Burn 
says no. And Barrett Brown says word. 
Q. That is on page 2; is that correct? 
A. That is on page 2, yes. 
Q. Okay. 

A. He then proceeds to give a few more, including credit 
card numbers . 

Q. With regard to the very beginning of this 
Government's Exhibit No. 50 chat, it mentions Echelon 2 ; 
is that correct? 

A. It references, let me find it here. He says, "on 
that list . " 
Q. Okay. 

A. I understand that list to be from Echelon 2. 

Q. What is Echelon 2 as it relates to Project PM? 

A. I understand that is the WikiLeaks site that they 
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were interested in investigating. 

Q. Project PM is the entity and Echelon would be the 
website where the entity would allow its individuals to 
communicate with one another; is that correct or post 
things ? 

A. To post information. 

Q. Government's Exhibit No. 51 is this another chat that 
is a private chat? 
A . It is . 

Q. With regard to this particular chat, what is the 
substance of this conversation? 

A. This is a chat that occurred in early March 2011. It 
appears to be with an individual using the name K, and 
there is quite a bit of information here when they are 
talking backgrounds and their experience with Anonymous 
and predecessor organizations. 

Then on approximately page 3, it says we are 
concentrating on three. I have several people probing to 
see if we can get e-mails. I want to do a surprise 
attack. I can get into most systems. Because if you can 
get in, and K interrupts, if you want information on 
people, just ask. Barrett Brown says, I will love you 
forever; yes. I want info on DEA employees as much as 
you can get. If you get into their e-mail, I have credit 
cards for most U.S. government officials. And his 
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response, even better, and then a couple more 
explanations, yes. 

Q. Does K then post some information to prove that he 
has this data? 

A. Yes, he posts a credit card information for a 
government employee and a password. 

Q. Does Barrett Brown go on after that to again talk 
about getting FBI or DEA information — at 10:15? 
A. Right, so he says then Barrett says he actually likes 
this, this company, and he says — K says I have for DHS, 
NSA, FBI, NCC, and FBI. And Barrett says, oh, I see, 
FBI, I'd love those, but DEA is something I am especially 
interested in . 

Q. If we could go to Government's Exhibit No. 52. Is 
this another private chat with 0? 
A . It is . 

Q. And with regard to this chart, what are they saying? 
A. First part of this, Mr. Brown is speaking with 0, and 
0 tells him he gave a compromised site to an individual 
who is working with Project PM. And 0 says he has got 
too many other targets lined up to really make me any 
moves on it. There's passwords on all their domains and 
may yield some interesting stuff. He says "shit" 
actually. I don't think I will be able to ride on that 
target I was talking about yesterday. I don't want to 
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rush a job when it is incomplete. This target is worth 
waiting to see if I can get the emails. 
Q. Further down on 21:41, do they identify another 
potential target? 

A. Then they continue on, and 0 asks Mr. Brown real 
quick you finally saw the evidence the Combined Systems 
rumors are around the net, and Mr. Brown says Combined 
Systems, let me okay. And 

0 asked, keep that target quiet obviously. Mr. Brown 
says bingo. These types of tear gas canisters from 
Combined Systems, Inc., of Jamestown, PA also have been 
linked to killing of Bahraini protestors, and he says 
indeed. He goes on. 

Q. At the bottom of the page, do we talk about what's 
going to happen? 

A. Yes, and 0 says, yes, almost ready, keep quiet, no 
hints. Mr. Brown asks, are you going to deface the site 
too? And a few minutes later, 0 says, okay, it's defaced 
and lists several sites with the Combined Systems. 
Q. Did they discuss anything that 0 has found on the 
hack at this point at 23:05? 

A. Yes, he says, I think that is a decent client list 
since they moved to a new server host a month or two ago, 
and the e-mail third party professional worked on this in 
the past and with one another, and I'm hoping someone 
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would double, but it never did. I dumped the spools of 
both of those in the web developer. 
Q. What does that line mean? 

A. I take that to mean he dumped the mail spools in that 
web s e r ve r . 

Q. That would be the way they get the e-mail accounts; 

is that correct? 

A. Yes, the contents, yes. 

Q. And is there is a reference at the bottom by 0. What 

is that? 

A. This is another site I mentioned previously. I 
understand it was a compromised site also attributed to 
Mr . Hamilton . 

Q. Now, this was on February 13, 2012; is that correct? 
A . Yes . 

Q. Also on February 13, 2012, if you go to Government's 
Exhibit No. 54, we are going to skip over 53. 
Government's Exhibit No. 54, Mr. Brown is in another room 
talking at the same time; is that correct? 
A . Yes . 

Q. He is simultaneously boxing up? 
A . Yes . 

Q. So he has one conversation going with 0 and other 
conversations with others? 
A. Yes, that is correct. 
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Q. In boxes does — what — how does he come into the 

room and what does he do? 

A. Are you asking about the beginning? 
Q . Yes . 

A. He posts a Pastebin link. 

Q. And with regard to — what does he start discussing 

at that point? 

A. I am looking for it. 

Q. Let me refer you to page 5 of Government's Exhibit 
No. 54, does Mr. Barrett Brown start talking about the 
anniversary of the Bahrain protests? 

A. Yes, 14:28 is the beginning of the Bahrain protest. 
Q. Go to the bottom of page 6. Mr. Brown posts a link 
and what is he referencing there, the link is 
policemc.gov.bh? 

A. He posts a URL to a website that appears to be 
associated with Bahrain, and he asks, "So, this can't be 
used?" 

Q. And then there is a question from one of the 
participants to Barrett Brown, RFI SQLI, that is at the 
top of page 7 . What does that mean? 

A. This is a query to see if the site is functional and 
he says doesn't look like it unless you have Oday. 
Q. So they are discussing whether or not that particular 
site can be used? 
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A. Compromised. 

Q. Compromised. Back down at 15:44, the last reference 
at 15:44 indicates that he is going to get a list of 
Bahrain government sites; is that correct? 
A . Yes . 

Q. Are the other individuals still talking about 
different ways to compromise the site? 

A. Yes, they are talking about places to check for more 
vulnerabilities . 

Q. And at bottom of page 8, does Barrett Brown again ask 
about policemc . gov . bh? 

A. He says can we get the DDOS again, and he gives the 
reference to the domain. 

Q. And on page 9, what are they discussing about DDOSing 
those sites or attacking the sites? 

A. He asks if the site is vulnerable initially, and he 
asks what can be done, and one of the people who runs 
every site in the country that they can find with no 
luck . 

Q. So they are not having any luck on any of these 
sites; is that correct? 
A . Yes . 

Q. Mr. Brown changes his target. What does he now 
state ? 

A. He suggests Qorvis . 
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Q. How does that discussion go in general? 

A. He gets a positive response to do that. He posts the 
domain name for it, for Qorvis. 

Q. Then if we go to the same Government's Exhibit No. 

54, but page 10, has Barrett Brown starting at 18:06 

listing different links to sites? 

A. I am sorry. What time did you say? 

Q. Page 10, 18:06. 

A. He posts the Qorvis site. He posts the 
pol i cemc . gov . bh . He posts the pastebin.com, and the 
Twitter link and he is basically providing, that he was 
attacking Bahrain and Qorvis . 

Q. Further down on Government's Exhibit No. 11, are they 
still discussing different attacks? 

THE COURT: You mean page 11? 

MS. HEATH: I am sorry. Page 11. Thank you. 
Your Honor . 

Q. (BY MS. HEATH) Government's Exhibit No. 54, page 11. 

A. Yes, and justification for attacking them. 

Q. Turn to page 12, and at 20:27, Barrett is asked 

should we resurrect Bahrain, and what is Barrett Brown's 

response? 

A. Absolutely. 

Q. Does he give a reason why they should do that? 

A. Because tomorrow is the anniversary of the protest. 
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Q. Does he indicate what the purpose of the attacks 

would be? 

A. They wanted to distract the cyber cops, so they 
won't be able to concentrate on a local. 

Q. That would be local concentration in that country? 
A. In Bahrain, yes. 

Q. And further down on page 12, Barrett Brown again 
mentions Qorvis; is that correct? 

A. Yes, mentions Qorvis and indicates the firm assisting 
Bahrain . 

Q. On page 13 at the top, does Barrett Brown inquire as 
to anybody wants to join them in their 24-hour 
OpBahrain? 

A. Yes, it is the goal for it, and that is ask for 
part icipat ion . 

Q. If we could skip to page 15 at 22:37 Barrett Brown 
posts something in Twitter; is that correct? 
A. Yes, he posts a link to his Twitter account called a 
tweet . 

Q. And this is Barrett Brown LOL? 
A. Yes, Barrett Brown LOL. 

Q. Going back, keeping that place, he posts a Twitter. 
If we could go to Government's Exhibit No. 53 at the very 
first section, is that that link in Twitter? 
A. That is the same status ID. 
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Q. And what does that Twitter — what is that Twitter 
me s 3 age ? 

A. The text was selling tear gas to the hashtag Bahrain 

regime, been disrupted. It has been linked to — 

Q. That is happening at the same time as he is in the 

chat; is that correct? 

A . Yes, yes. 

Q. And then right under there is an individual who goes 
by Black Blocc; do you see that? 
A . Yes . 

Q. What is he saying there with regard to an attack? 
A. He says, "Okay, I lied on the hack log just a little 
bit. I didn't RM-RF yet, but I have my finger on the 
trigger. " 

Q. What is does "RN-RF" mean? 

A. A unique system that is forced deletions, basically 
wipes the file system out. 

Q. So once — basically for a lay person, once he pushes 

the button everything is wiped? 

A. Yes, wipes everything. 

Q. What does Black Blocc say? 

A. It says, I have my finger on the trigger, waited just 
long enough so it can be mirrored on Zone H. 
Q. What is Zone H? 

A. Zone H is a site that people often use defacements. 
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Q. If we could go to Government's Exhibit No. — 
Government's Exhibit No. 59, is that an example of a 
Zone H screen shot? 
A. Sorry? 

Q. It should be your second to last piece of paper 
actually? 

A. Okay. Yes, it is. 

Q. This is a website where what happens? 

A. So, when a site is added it basically makes a copy of 
the site at that time to archive it. It is attributed to 
a particular account. In this case the account was 
Ant iSec . 

Q. And this was the screen shot for AntiSec Zone H 
accounts; is that correct? 
A . Yes . 

Q. All these actions here would be hacks attributed to 
AntiSec? 

A. Yes, they notified — 

Q. The ones that we were just discussing, that appeared 
on Zone H; is that correct? 
A. Yes, that's correct. 

Q. And that is what Mr. Black Blocc or the person that 

went by the nickname Black Blocc waited long enough so it 
could be mirrored on Zone H? 
A . Yes . 
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Q. If we could go back to Government's Exhibit No. 54 in 
the very last page of that exhibit. Exhibit No. — page 
16. Does Black Blocc apparently push the button to erase 
the site? 

A. Yes, there is a line that says, 

dd if=/dev/zero of =/dev/hdal , which I take that to mean 
it is copying zeros on the disk drive. 
Q. So wiping it, basically it is copying zeros to 
everything on that drive? 

A. The next line says kaboom, and it has less than sign, 
three . 

Q. Is that referencing like a heart? 
A . Like a heart . 

Q. And Barrett puts a pastebin a little while after that 
link; is that correct? 
A. Yes, pastebin. 

Q. Now, Government's Exhibit No. 56 and 55, what are 
these in general? 

A. 55 is a — the IRC chat that we just discussed. 

Q. That was the last one that Barrett Brown posted links 

that we just discussed? 

A. Yes, and it has Project PM, and it's basically 
describing motivation for targeting companies including 
Qorvi s . 

Q. And then what is Exhibit No. 56? 
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A. 56 is the text from Zone H of the defacement, and it 
starts off with AntiSec. Anonymous, AntiSec, solidarity, 
and there is sort of a manifesto here that basically just 
describes why Combined Systems was defaced and RM ' d by 
Anonymous on the anniversary of the Bahrain uprising. 
Q. And then finally we did look at Government's Exhibit 
No. 59 which was a screen shot from Zone H. There is 
Government's Exhibit No. 57 and 58. Are those other 
screen shots from Zone H? 

A. 58 is a screen shot. 59 and 60 are all screen shots. 
Q. And Government's Exhibit No. 60 is a screen shot of 
what ? 

A. That is a screen shot showing a portion of the 
defacement . That was archived on Combined Systems at the 
combinedsy St ems . com . 

Q. There is more than just the listing of it? 
A. Yes, this tells the site, the type of operating 
system, the type of the web server, when it was 
archived. This is actually scrolled to show our RM-RF, 
and it says, "Black Bloc Attack." 

Q. Now, with regard to the exhibits that we have looked 
at and talked about, Mr. Barrett Brown — what would your 
testimony be with regard — what entities is Mr. Brown 
associating himself with or claiming to be associated 
with, with regard to the Anonymous group? 
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A. Well, he certainly associated himself with Project 
PM, with Anonymous. He is associated with individuals in 
the AntiSec and LulzSec. 

Q. How is it that the evidence that you found in 
Mr. Brown's computer and other evidence in this case 
associated him with AntiSec and LulzSec? 

A. Well, for example this attack associates these two 
things together. Mr. Brown was talking to 0 also using 
the name Black Blocc during this defacement. If you look 
at the defacement page, it associates all these things 
together as well. Mr. Brown was then making statements 
about this, justifying why it was done. 

MS. HEATH: Your Honor, if I may have one 

moment . 

THE COURT: You may. 

(PAUSE IN PROCEEDINGS.) 
Q. (BY MS. HEATH) Now, with regard to these operations 
and activities that Mr. Brown was discussing, he did not 
engage in these by himself? 
A . No . 

Q. From the evidence, were these jointly undertaken 
activities ? 
A . Yes . 

Q. And did he and others agree with him or agree with 
each other to engage in these activities? 
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A . Yes . 

Q. Now, with regard to the stolen data that is taken 
from these activities, what is Mr. Brown's role in 
dealing with the stolen data? 

A. Well, one of the things he did, was he organized the 
data and went through the data. From that he could 
develop additional targeting opportunities for the group 
to go after . 

Q. Would he on occasion post the personal information 
obtained through the hack or publish or make it 
available? 

A. I would say he was working with the information 
publicly that was involved with the hack. 

Q. Now, when you also previously indicated with regard 
to that information that he would make telephone calls 
and talk to some of the individuals? 
A . Yes . 

Q. Is there anything else that you can think of that 
Mr. Brown did with regard to the information that was 
stolen during these intrusions? 

A. Well, some of the things he did so, for example, when 
he got passwords, there are chats that imply strongly 
that he was trying to utilize those passwords to access 
accounts . 

Q. And he attempted to access those accounts? 
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A. The chats imply certainly he was trying to figure out 
where he would go to try to log into one of the accounts 
he had a password for. 

MS. HEATH: Your Honor, we pass the witness. 

THE COURT: All right at this time we are going 
to take our lunch break. It is almost 12:30. We are 
going to recess for an hour. Before we break. Counsel 
let me see you at the bench. 

(THE FOLLOWING PROCEEDINGS WERE HAD AT THE BENCH, 
WITH ALL COUNSEL PRESENT.) 

THE COURT: I take it this is your only witness. 

MS. HEATH: Yes, that is it. 

THE COURT: How long will you take for 
cross-examination, Mr. Swift? 

MR. SWIFT: Round figure, maybe 30 or 15 depends 
on what the witness does, and I anticipate a rebuttal 
witness on a lot of this subject area to be direct 30 to 
4 0 minutes . 

THE COURT: I will let you know now, if you don't 
get through today, I cannot continue this tomorrow. I 
have something that came up. The way you are going, we 
are not going to get through today. 

MR. SWIFT: I understand. 

THE COURT: You need to advise the parties they 
may have to come back because I have something set. I am 

Charyse C. Crawford, CSR, RPR 
1100 Commerce, Room 1544, Dallas, Texas 75242 
(214)753-2373 Telephone 
Charyse_Crawford@txnd.uscourts.gov or charysecrawford@gmail.com 



1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 



92 



going to be in a hearing all day tomorrow and several 
motions and several individuals, so if we do not get 
through today, we will not be able to set it tomorrow. 
We will have to reset it for some other time. That may 
inconvenience a number of people. I want you to let your 
people know if they were coming from the defense, and if 
they were coming from the government. 
MR. SWIFT: Yes, sir. 

MS. CADEDDU: Thank you. Your Honor. 
MS. HEATH: Yes, Your Honor. 
THE COURT: All right. 

THE COURT SECURITY OFFICER: All rise. 
(A RECESS WAS HAD, AFTER WHICH THE FOLLOWING 
PROCEEDINGS WERE HAD IN OPEN COURT, WITH ALL PARTIES AND 
COUNSEL PRESENT.) 

THE COURT: All right. Counsel approach the 

bench . 

(THE FOLLOWING PROCEEDINGS WERE HAD AT THE BENCH, 
WITH ALL COUNSEL PRESENT.) 

THE COURT: Given the pace of this hearing and 
what the Court has to consider, I just do not see how 
there is going to be any way possible that we can finish 
today, and the Court can consider all of this testimony 
along with the exhibits. 

I have looked at some of the exhibits. I am not 
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sure what is left to come, so this is what I am going to 
propose to the parties. I propose we take all of the 
evidence today. I can hear your arguments as to the 
issues that remain. I will study that, and we come back 
and do the actual sentencing sometime in January. 

MS. CADEDDU: We are hopeful that we can get 
finished today. 

THE COURT: Ms. Cadeddu, I tried to start off 
giving the parties a chance and what happens is I am 
generous and liberal to the parties, and they back the 
Court in a corner. The Court has a lot to digest. There 
is going to be cross-examination of Agent Smith. There 
is probably going to be redirect and recross. 

Then there is going to be a witness from the defense, 
and that is probably going to take anywhere — between 
cross-examination and direct and redirect and recross, 
probably an hour-and-a-half , and then we have other 
issues. I don't want anyone saying on appeal if the case 
is appealed that the Court did not give adequate 
consideration to the issues. Frankly speaking, I want to 
read the transcript, and that will not be ready for a few 
days . 

MS. CADEDDU: So the Court -- I didn't mean 
interrupt . 

THE COURT: No, go ahead. 
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MS. CADEDDU: We will finish with the evidence 
today because our witness is from Europe. 

THE COURT: Yes, you will finish with the 
evidence today. We will take as long — we will go as 
long as necessary to finish the evidence today and the 
argument. We will see where we get, but the evidentiary 
portion of this hearing will conclude today, but the 
actual sentencing and the Court ' s rulings will come at 
some subsequent time. 

While I have you here at the bench, the dates that I 
am looking at Tuesday, — not Tuesday — okay, Wednesday, 
January 21st, in the afternoon, any time on the 22nd of 
January, or any time on the 23rd of January. The 22nd is 
a Thursday, and the 23rd is a Friday. Those days are 
open right now or at least I can move things around. 
Is there a preference for a Thursday or Friday? 

MR. SWIFT: I have to retrieve my calendar, sir. 

THE COURT: Sure. Mr. Ghappour, do you have a 
preference ? 

MS. HEATH: Any of those days are open for me, 
but the calendar — I don't have a calendar. It is back 
in my office . 

MR. GHAPPOUR: Your Honor, I will be in Brussels 
for a conference that I agreed to, but I am sure that 
Mr. Brown would waive my presence, and since it is just 
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the issue of the sentence, I don't think that it should 
further delay your decision. 

THE COURT: All right, thank you. 

MS. CADEDDU: I am sorry. Your Honor, Tuesday -- 
Wednesday? 

THE COURT: Wednesday in the afternoon is 
available . 

MS. CADEDDU: That is fine with me. 

THE COURT: Thursday all day, Friday all day. 

MS. CADEDDU: Any of those is fine with me. 

THE COURT: Mr. Ghappour, you cannot meet any of 
those days? 

MR. GHAPPOUR: I will be -- that week is out for 
me, but I actually would defer to my co-counsel on 
presence, and I can ask Mr. Brown right now if he would 
be happy to waive my presence. Should I do that? 

THE COURT: Yes. 

MR. SWIFT: Your Honor, I have no preference. I 
have a memo due on one of the dates, but that's it. 

THE COURT: All right, Ms. Heath, you say you are 
okay on that date. 

MS. HEATH: I am okay on any of those days. 

THE COURT: Ms. Stewart, I will leave it to 
you. Okay, Thursday is the 22nd of January, 2015, and I 
want to hear back from Mr. Ghappour. 
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MS. HEATH: With regard to the exhibits that the 
government has offered and the Court has admitted, we 
would like to offer a redacted version for purposes of 
publication, but not disclose for public consumption. 
Some of the data in there contain things such as personal 
identifiers of individuals, and I can go through and get 
those for the Court by tomorrow, and the defense's 
agreement as to what should be redacted because the Court 
has requirements on what should be redacted as far as 
document s . 

MR. SWIFT: I agree that some portions of the 
documents should be redacted. 

MS. HEATH: We should be able to agree on that. 
MR. SWIFT: We can agree on that. 

THE COURT: I will let the parties work on that, 
just so it is clear, none of those documents are to be 
made public. 

Mr. Ghappour, what did Mr. Brown say? 

MR. GHAPPOUR: Mr. Brown waives my presence on 
any day that you pick. 

MS. CADEDDU: We can certainly put that on the 

record . 

THE COURT: All right, I will. Thank you. 
(THE FOLLOWING PROCEEDINGS WERE HAD IN OPEN COURT, 
WITH ALL PARTIES AND COUNSEL PRESENT.) 
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THE COURT: The Court has conducted a bench 
conference with Counsel for both sides in this case. 
There are matters of importance here. It is set for the 
benefit of the parties as well as those individuals 
attending. Given the pace of this hearing and the amount 
of testimony that has taken place and the Court 
anticipates taking place today, the Court does not expect 
to sentence Mr. Brown today. 

There are a number of exhibits that have been 
introduced. Special Agent Smith has to be 
cross-examined, and there is probably some redirect and 
recross. It is my understanding that the defense will 
have a rebuttal witness. That will take sometime. The 
Court has to hear all of that testimony. The Court also 
would like to read the transcript to make certain that it 
fully understands and takes into account the evidence 
that the parties have presented. 

There will probably be further arguments made by 
Counsel concerning various issues, and to make a long 
story short, given what has to be done, the Court is 
going to in all probability run out of time. 

Moreover, the Court does not wish to rush the 
sentencing. As the Court stated earlier, it desires to 
review the transcript of this hearing before it imposes 
any sentence on Mr. Brown. The Court will take all the 
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evidence today and may hear argument from Counsel on 
their various points, but as I stated before, the 
sentencing will not take place today. 

The Court has consulted with Counsel for the 
government and Counsel for the defense, and the Court 
hereby will continue this sentencing hearing after today 
to January 22, 2015, at 9:00 a.m. I will get as far as 
we can today, but the actual sentencing will take place 
on January 22, 2015. 

It has been brought to my attention, Mr. Brown, that 
Mr. Ghappour, one of your Counsel will be out of the 
country. He will be in Brussels, and the question I have 
for you, sir, do you waive his presence being here? 

THE DEFENDANT BROWN: Yes, Your Honor. 

THE COURT: And you are telling the Court that 
you accept the fact that Mr. Swift and Mr. Cadeddu are 
certainly capable of handing your case. 

THE DEFENDANT BROWN: Absolutely, Your Honor. 

THE COURT: All right, very well. For those of 
you who are attending this case, the Court also provides 
information so that you can plan the rest of your day and 
also know when the actual sentencing in this case will 
take place. All right, having said that, we had just 
finished direct examination. 

Special Agent Smith, we are ready for 
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cross-examination. Agent Smith, I would ask you to keep 
your voice up. I want to make certain I hear you and the 
court reporter hears what you say. 

THE WITNESS: Yes, sir; thank you. 

MR. SWIFT: Thank you, sir. 

CROSS EXAMINATION 
Q. (BY MR. SWIFT) Agent Smith, I would like to start by 
talking about the hacks that are at issue in the 
pre-sentencing report. Have you reviewed the 
pre-sentencing report? 
A . Yes . 

Q. In the pre-sentencing report, we identify four hacks 
primarily at issue, those being HBGary or HBGary Federal 
Incorporated, Strategic Forces or Stratfor, Combined 
Systems, Incorporated, and Puckett and Kirby; is that 
correct ? 
A . No . 

Q. Puckett and Faraj? 

A. Puckett and Faraj, Strategic Forecasting. 

Q. Stratfor. Let's start talking about the HBGary. Were 

you involved in the investigation of that computer 

intrusion? 

A. I was not directly involved in that investigation. 
Q. Based upon your status in this investigation, do you 
know who were the people who conducted the intrusion? 
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A. This investigation really didn't have visibility into 
the intrusion, so I don't think I could answer that 
question . 

Q. You don't know — well, let me ask you, do you have 
knowledge on whether an individual known as Sabu 
conducted that? 

A. I know that Sabu was involved from Mr. Brown's 
computer . 

Q. Was Mr. Sabu one of the principal persons who 
conducted the intrusions? 

A. It is my understanding that he may have been 
involved. I don't know precisely who did the intrusion, 
sir. 

Q. How about Topiary? 

A. From Mr. Brown's computer, it looks like he was 
compromising the Twitter account. 
Q. How about Kayla? 

A. My understanding Kayla was involved. As to which 
role, I don't know. 
Q. And Tflow? 

A. Again, I understand Tflow was involved, but as to the 
specifics, I don't understand. 

Q. So you don't know who actually conducted the 
intrusion? 

A. Aside from the chat that we spoke about today 
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involving the Twitter account, that is the extent that I 
reviewed for this case. 

Q. That is the extent. You don't know whether Mr. Brown 
played any role in selecting HBGary, do you? 
A. My understanding is that he was involved with writing 
a document the day prior sort of admitting defeat to 
HBGary . 

Q. Let me ask this: Do you have familiarity with 
computer intrusions in general? 
A . Yes . 

Q. Do those intrusions generally take place over a 

period of time? 

A. Define a period of time. 

Q. One day — let's say a day to a week? 

A. Computer intrusions can happen very rapidly. 

Q. Do they often occur over a period of time however, 

where Anonymous is concerned? 

A. They may occur over a period of time. 

Q. In other words, we gain intrusion? 

A . Sur e . 

Q. We learn what we have, and then we prepare to 
broadcast it? 

A. That's one set of things that could occur. 

Q. Do you know whether that was the system that was used 

in the HBGary intrusion? 
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A. What I understand is that they compromised the 
servers, and they determined that they had access to mail 
spools and other documents and they took those. 
Q. Who is "they?" 

A. The individuals who were responsible for the 
int r u s ion . 

Q. Do you have any knowledge that Mr. Brown was one of 
those persons? 

A. My understanding is that from the chat that we 
discussed that he was involved with that. I know that he 
made phone calls to the individuals as the intrusion was 
happening, calling them to — 

Q. Did he participate in the intrusion? Was he one of 
the hackers who gained access? 

A. To the extent that he was speaking to Topiary as 
Topiary was conducting the intrusion, yes, I would say he 
was involved and providing advice. 

Q. Were you aware that other reporters spoke to the 
intruders ? 

A. What I am speaking of is a private discussion. It 
was not an overt discussion where someone was speaking to 
the media. It was private information that was shared 
between people to be co-conspirators. 

Q. Were you aware that reporters spoke to individuals in 
these hacks in private discussions while they were on 
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going? 

A. I would not be aware of any specific discussions that 
I could bring to point . 

Q. And you don't know when the intrusion began? 

A. My understanding is the intrusion occurred on or 

about February 5, February 6. 

Q. Do you know why HBGary was targeted? 

A. My understanding is because of a report that they 

reportedly were going to give to law enforcement, and 

this was retaliation for cooperation with law 

enforcement . 

Q. By an article that they published in a newspaper that 
Mr. Barr stated? 

A. By reviewing the chat logs and conversations, 
listening to that. 

Q. Well, Mr. Barr stated in a newspaper report that he 
had information that he had been able to provide who the 
members of Anonymous were, determine who the principal 
members of Anonymous were; correct? 
A. I think that is true, yes. 

Q. And thereafter some of the members of Anonymous or 
persons purporting to be members of Anonymous targeting 
him; is that correct? 
A. That's my understanding, yes. 

Q. Is there any showing that Mr. Brown played a role in 
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selecting him after that? 
A. Well, he called him up. 

Q. Certainly after the hack had been started. 
A. Right. He called him up. He called him into the IRC 
channel where the people were responsible for this 
intrusion were wanting to confront him. 

Q. And you testified that HBGary Federal failed after 
the intrusion? 
A . Yes . 

Q. Wasn't that because during the intrusion, documents 
were uncovered that were made public to wide sources that 
indicated that HBGary Federal had proposed contracts with 
the Chamber of Commerce for instance to spy on or 
discredit public information groups including WikiLeaks 
and other public information groups, and that created 
quite a controversy for them? 

MS. HEATH: Your Honor, we would object to the 
relevance as to what the victims were doing in this 
case. Their system was hacked. This is going to what 
Mr. Brown's role in the actual activities in criminal 
conduct was . 

MR. SWIFT: It is relevant. Your Honor. Part of 
that role is publicizing documents, and as a reporter 
these were documents with interest. 

THE COURT: I will carry the objection, and when 
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I review the transcript, if the Court determines that it 
is irrelevant, the Court will simply ignore it. If the 
Court considers it relevant, the Court will take it into 
consideration at the sentencing phase. Do you need to 
reask the question or was the question answered? 

MR. SWIFT: He did not answer the question. 

THE WITNESS: Repeat the question. 
Q. (BY MR. SWIFT) Isn't it true that HBGary's failure to 
take steps principally from the publication of documents 
indicating that contracts to or proposing contracts to 
the U.S. Chamber of Commerce and other organizations to 
discredit sites such as WikiLeaks or other public 
interest groups as part of an anti-information strategy? 
A. I don't know that I could address the exact reason 
why the company failed. I think certainly as we see 
today companies that have intrusions and have their 
documents publicly displayed suffer harm. The extent of 
that harm may cause them to lose business. For example, 
if you are a security company and you are compromised, 
that could be a profound impact on your business just by 
the perception on the face of the security company being 
compromi s ed . 

Q. The parent company did not fail? 

A. My understanding is they sold the assets of that 
company . 
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Q. They were bought later? 
A. The assets were sold. 

Q. Let's talk about the Strategic Forces. Now, did you 
participate in the investigation of the Strategic Forces 
in — computer intrusion or hack? 
A. You mean Strategic Forecasting. 
Q. Strategic Forecasting, Stratfor? 

A. I was not directly involved in that investigation. 
Q. Well, we are here on an accessory after the fact on 
that investigation? 
A . That ' s true. 

Q. You would agree that that investigation is 
particularly relevant? 

A. I think it is definitely one example of Mr. Brown's 
activity where he was looking for information. It is 
relevant in that sense. At one point, Mr. Brown 
articulated Strategic Forecasting as being akin to France 
and World War II. You have to land in France, invade 
Germany. Mr. Brown was very interested in the customers 
for Strategic Forecasting. They were consumers of 
intelligence and viewed them as potential targets. 
Q. Let's talk about how Strategic Forecasting was 
targeted. Now, Strategic Forecasting was targeted by the 
AntiSec group; is that correct? 

A. It was my understanding that they were AntiSec. 
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Q. In the AntiSec group were members — and you 

mentioned another group, the LulzSec — LulzSec Group, 

and these were subgroups that did not involve all of 

Anonymous; correct? 

A. I think that is true, yes. 

Q. In fact, small groups of hackers? 

A . Yes . 

Q. And that group included Jeremy Hammond? 

A. Which group? 

Q. The AntiSec Group? 

A. I understand that he was involved in AntiSec. 
Q. It also included Sabu? 
A . Yes . 

Q. Now, Sabu is also known as I believe it is Monsignor 
excuse me — one second — Hector Monsignor? 
A. Hector Monsignor. 

Q. Prior to the Stratfor he had been arrested by the 
FBI; is that correct? 
A . Yes . 

Q. So he was now under the control of the FBI? 

A. My understanding he was cooperating with the FBI at 

that point . 

Q. And his role inside the AntiSec group was to 

determine or collect target vulnerabilities? 

A. I am not sure what his role was in AntiSec to be 
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honest . 

Q. What are target vulnerabilities? 
A. What are? 
Q . Yes . 

A. We were talking about vulnerabilities earlier. Is 
that what you are asking about? 
Q . Yes . 

A. For example, if there is a particular target that you 
are looking to execute a computer intrusion on, it is 
important to know what kind of vulnerability that target 
has. It could be software vulnerabilities. It could be 
password vulnerabilities. It could be database 
vulnerabilities. So I would take that to mean the whole 
set of possible ways. 

Q. You would agree with me with your knowledge of 
computers, cyber crimes, et cetera, that you have to have 
both the desire and the target has to be vulnerable to be 
a method of intrusion that is available to those seeking 
to intrude? 
A . Yes . 

Q. So the person who is determining the target 
vulnerabilities has significant control over who is 
selected? 

A. I don't think I could answer the question. I don't 
know. I would take it to mean the — in the sense that 
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that is a site vulnerability when you are talking target 
vulnerabilities. I think you are talking specific 
targeting of some of the examples we looked at before 
where a target is being selected for exploitation. You 
identify the vulnerability. You have exploited for it, 
and you are trying to motivate someone to target that 
site. 

Q. All right, so the first part comes it has to at least 
in Anonymous' operations has to be vulnerable? 
A. Right. 

Q. And inside the AntiSec Group, you don't know whether 
Monsignor or Sabu was the person collecting that? 
A. I don't recall. 

Q. Do you know whether he set up the IRC channel where 
he controlled persons to submit vulnerabilities? 
A . I don ' t . 

Q. Do you know how Stratfor was selected by the hackers? 
A . I do not . 

Q. Do you know how long the Stratfor hack — Strategic 
Forces hack was going on? 

A. It is my understanding it was compromised in early 
December of 2 011. 

Q. Do you know whether Mr. Brown had any knowledge of 
that? 

A. Of what? 
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Q. That it was compromised when it was. 

A. I don't know if he knew when it was first 

compromi s ed . 

Q. Do you have any information whether Mr. Brown was 
informed before it was targeted? 
A . No , sir. 

Q. Now, you did conduct a computer forensic examination 

of all of his computers? 

A. Not of all of his computers. 

Q. The computers that you seized? 

A. The computers from his mother's house. 

Q. And in conducting those computer forensics, you were 
able to find a lot of documents including documents 
related to Strategic Forces? 
A. Strategic Forecasting. 

Q. And you were able to find ICR chats? 
A. IRC chats. 

Q. You weren't able to find any that related to Stratfor 
where he would have gotten information in early December, 
were you? 

A. He first became aware of it on I guess December 

23rd. I think was the date. 

Q. That is the information you had. 

A. That is the information I have from looking at his 
computers, yes. 
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Q. It had been ongoing for quite sometime at that time? 
A. I guess a couple weeks, yes. 

Q. Now, let's talk about Puckett and Faraj. Who was 
that hack conducted by? 

A. My understanding that was conducted by a person with 
the user name 0. 
Q. By who? 
A. 0 . 

Q. Oh, 0. Does 0 also go towards Jerry Hammond? 
A. I think that is an alias of Jeremy Hammond. 
Q. Jeremy went by a lot of screen names? 
A. I understand he had a lot of screen names. 
Q. Do you know if anyone assisted him? 

A. Mr. Brown was discussing the hack while Mr. Hammond 
was actually still accessing compromised computers at 
that firm. 

Q. Did Mr. Brown assist him in accessing the computers? 
A. Well, to the extent Mr. Hammond asked him not to 
reveal that this was on going because he was still 
exploiting the target, he provided that level of 
assistance . 

Q. Were you aware that other journalists were asked 
similar questions as part of providing them information 
about hacks? 

A. I am sorry. Could you rephrase the question? 
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Q. Were you aware that other journalists also were 
required or agreed not to share information about an 
ongoing hack prior to its publication? 
A. I am not aware of other journalists in this 
particular case. 

Q. And in the Combined Systems, the same thing, did 

Mr. Brown have access to Combined Systems? 

A. So again, he was speaking to this person using the 

name 0, Jerry Hammond, who was accessing the systems. As 

he was speaking to Mr. Brown, Mr. Brown made suggestions 

as we discussed, the ideas for defacing the site. 

Q. Did he make suggestions or did he ask a question? 

A. He asked a question. 

Q. He asked a question? 

A . Yes, sir. 

Q. Now, let's go back. After the HBGary hack, were you 
— did you review ICR chat logs between Mr. Brown and 
some of the hackers including K? 

A. I am sorry. Could you repeat the question? 

Q. Did you review ICR chat logs between Topiary and K or 

Kayla regarding his publicity? 

A. You mean private messages between the two of them? 
Q. Or ICR chats? 
A. So like IRC? 

Q. In this channel or another channel? 
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A. Regarding? 

Q. Regarding what Mr. Brown was doing in the media? 
A. Perhaps. I can't recall any activities. 

MR. SWIFT: What is the next exhibit? I don't 
think we have any. 

THE COURT: You don't have any, so I think we 
start with 1. All right, just one minute. 

(PAUSE IN PROCEEDINGS.) 

THE COURT: All right, Mr. Swift, you may 

proceed . 

MR. SWIFT: If I may approach, I will hand it up 
to the Court first, what we have marked as Defense 
Exhibit No. 1 is an excerpt including chats from 
Gabriella Coleman's quote by Anonymous which deals with 
chats or IRC log and chat conversation that occurred 
between Mr. Brown and several of the hackers right after 
HBGary. It is relevant to the implication that he was 
accepted as the spokesman for the persons who were 
conducting these hacks. 

THE COURT: Any objection, Ms. Heath? 

MS. HEATH: Your Honor, we object unless it can 
be qualified as coming from Mr. Brown's computer. I 
imagine some of the chats may have come from his 
computer. We wouldn't have any objection to those 
specific chats, but the excerpt from a book, we would 
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object to that. That is not relevant what somebody 
else's opinion and twist on things was. We prefer to go 
to Mr. Barrett Brown's own words. 

MR. SWIFT: For sentencing purposes. Your Honor, 
media, book publications, all of those things are 
relevant, sufficient foundation, newspaper articles were, 
in fact, cited in the probation report. Gabriella 
Coleman is the foremost anthropologist on the Anonymous 
movement and wrote specifically about this period of 
time. We can lay additional foundation with our witness 
for this transcript, but I would not give this witness an 
opportunity . 

THE COURT: Let me say this so the parties can 
know where the Court is going. I think both the 
government and the defense are going way too far, much 
further than necessary on all of these exhibits, and so 
that we don't slow up this hearing, I am going carry the 
objection, but I will tell both the government and the 
defense, when I read the transcript and review everything 
and if these documents even those that I have admitted 
have no relevance to what the Court needs to do, I am 
going to simply ignore them, and it seems to me that what 
is happening is each side wants to get the last word. 

This is not a jury trial. I know the media folk are 
out there, and I know what is going on. I wasn't born 
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yesterday. I do have questions about this document, that 
is. Defense Exhibit No. 1, but I am going to allow it at 
this time. If I find that it does not help or assist the 
Court in making its decision, it will be ignored. 
MR. SWIFT: Yes, sir. 

THE COURT: It is admitted with that caveat from 
the Court. Did you need this back, Mr. Swift? 
MR. SWIFT: Yes, I do. Your Honor. 

THE COURT: All right, Ms. Stewart will return it 

t o you . 

Q. (BY MR. SWIFT) I want you to take a look at that. In 
your investigation of this case, take a moment to review 
Defense Exhibit No. 1. 
A. Okay. 

Q. Were you aware some of the hackers were angry with 
Mr. Brown for his statements to the media? 
A. Are we talking about Strafor? 
Q. For the HBGary attack. 

A. I am not familiar with the things in here. I could 
not authenticate this for you. 

Q. You weren't aware of their anger toward him? 
A . I'm sorry? 

Q. You weren't aware of their anger toward him for 
making the statements? 

A. Yes, I was aware that there were people who were 
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upset with him for taking credit, if that is what you are 
after, for that word. 

Q. That they were angry, they didn't consider him a 

strategist, and they thought he was aggrandizing himself? 

A. It was perhaps viewed as a power grab. 

Q. And these were some of the people who actually did 

it? 

A . I'm sorry? 

Q. These were some of the people who actually 
part icipat ed . 

A. I am not sure who would have been upset with him. 

Q. And the e-mails that you described him as stating 

several different roles, a strategist, a 

p seudo- j ournali s t , a propagandist, and a troll. 

A. Those were words that he used to describe himself, 

yes. 

Q. Pseudo- journalist s , did he use that? Was he still 
using that term at the time the Stratfor hack occurred? 
A. I would not be able to tell you off the top of my 
head . 

Q. Again, referring to himself as a journalist? 
A. Again, for the time of these specific comments, I 
wouldn't be able to answer off the top of my head. 
Q. Did he have a book deal? 

A. My understanding he did have a book deal. 
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Q. To publish about Anonymous? 

A. Yes, there was a book deal related to Anonymous. 
Q. What is troll? 

A. What is a troll? As a verb? 

Q. When one refers to themselves in this context as a 
troll, what are they referring to themselves as? 
A. Someone who takes actions to elicit response from 
others . 

Q. Does that include lying about their roles or 
abilities? 

A. I don't know that there are boundaries to trolling. 
Q. Mr. Brown admits at points that he is a troll? 
A. He did in that document, yes. 

Q. Let's take a look at a statement. I am taking over 
Anonymous or I have taken over Anonymous. Is that a 
troll statement? 

A. Well, it depends on the context. I think statements 
made private to people to gain their confidence or to 
gain respect from them to be taken seriously, I would not 
characterize that as a troll. 

Q. Is there any evidence that he had taken over 
Anonymous, that he could guide it? 

A. Well, some of the things we discussed was selecting 
targets, trying to make arguments why certain targets 
should be attacked, that is a mechanism for control when 
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you are dealing with a group. 

Q. Would these — although Mr. Brown certainly after the 
fact was an apologist for many things or propaganda that 
Anonymous did. Prior to HBGary being targeted, prior to 
the operation starting, do you have any information — 

THE COURT: Just to put things in context, we 
are speaking in general terms. When you say prior to, 
let's start giving dates. 

MR. SWIFT: Okay. 

THE COURT: Put it in context since there has 
been a lot of statements about after the fact and this 
and that. If you are going to pinpoint something, let's 
give a date at least the month and the year that we are 
talking about, if not a precise date. 

MR. SWIFT: One moment. 
Q. (BY MR. SWIFT) HBGary, that operation, do you know 
that operation began on February 2, 2011? 
A. I was not aware of that. 
Q. When do you believe that it began? 

A. From the chats I can see, Mr. Brown's involvement 
specifically was around February 5, February 6, somewhere 
in that time frame. 

THE COURT: Of what year? 

THE WITNESS: Of 2011, sir. 

THE COURT: All right. 
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Q. (BY MR. SWIFT) Just in February of 2011? 
A. Are we speaking when it began? 
Q . Yes . 

A. IRC ' s involvement beginning substantively with regard 
to the intrusion and that sort of thing around that time. 
Q. And Stratfor began in early 2011; is that correct? 
A . Yes . 

Q. And did you have any — you don't know the date upon 

which HBGary actually started; is that correct? 

A. What I can say from Mr. Brown's computers I can see 

that he became involved with the intrusion in the time 

frame in February 5, February 5, 2011, more or less. 

Q. What I am driving at is you would agree a strategist 

needs to pick the target in advance? 

A. There were multiple targets. When you look at the 
process that is going on here, there are multiple threads 
to the process, and each of these threads represents a 
different target in the state of development, if you 
will. Some of the targets may be emotional. Some of 
them may have vulnerability scans, the one we talked 
about earlier where Mr. Brown had a vulnerability scan, 
so he determined that it was possibly vulnerable. He had 
developed a rationale to justify the attack and began to 
try to generate interest with people who could actually 
get to the next level which is exploit. 
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Q. I understand. So there is evidence of him in some 
place late in the game actually presenting something like 
that. Well, what I am asking is, is there any evidence 
like that for HBGary that prior to the initiation of the 
hack, Mr. Brown made a suggestion and that they had 
influence upon the actual hackers? 

A. It is my understanding he was involved prior to the 
hack with writing the documents which was sort of 
admitting defeat to HBGary. 
Q . Prior — 

A. A mocking document, if you will. 

Q. Those occurred prior to the — prior to initiation? 
A. Prior to the interactions that I can see on his 
computer, yes . 

Q. Well, those were the interactions with Mr. Barr who 
has already been hacked; correct? 

A. Those were prior to September 5, September 6. 
Q. Mr. Barr had been hacked at that point; had he not? 
A. My understanding was it was approximately September 
6th that the hack occurred. I would have to refer back 
to the notes to be specific on that. 

THE COURT: Okay, what year are we talking 

about ? 

THE WITNESS: 2011. 
Q. (BY MR. SWIFT) That Mr. Barr was hacked at that time? 
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A . Yes . 

Q. And is there any evidence that prior to the 
initiation of the Stratfor hack that Mr. Brown selected 
Strat f or? 

A. I am not aware of that. 

Q. Okay, is there any evidence that prior to the 
selection of Puckett and Faraj that he had selected that 
as a target? 

A. Well, during the development of, for example. 
Combined Systems which was a similar hack, he was 
actually involved with making the determination whether 
it should be damaged or not. 

Q. Well, in that involvement, was he asking have you 
defaced it? 

A. Or even more than that, is it a worthy target, should 
it be harmed. 

Q. But the intrusion had already occurred? 

A. The actual damage to the intrusion at the site had 

not occurred. 

Q. With regard to Puckett and Faraj. 

A. With regard to Puckett and Faraj, I am not sure if he 
was actually available before the targeting of that 
particular site. 

Q. He certainly was a propagandist; was he not? 
A. He claimed to be a propagandist. 
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Q. The record was replete with him making apologetic or 
justifiable statements for the Anonymous movement on — 
in the news media multiple sources? 
A. I think that he definitely would comment on 
intrusions and seek to explain why the intrusions 
occurred. He would include the messaging that he wanted 
to include with those announcements. 
Q. Did Mr. Brown have any skills as a hacker? 
A. I would say that he had developing skills as a 
hacker. So, for example, he was aware of the concept of 
vulnerabilities. He had discussions about mapping 
infrastructure. He was past an exploit at one point and 
was able to find somebody who he thought could take 
advantage of that exploit. It appears they were able to 
do that. So I think he understood sort of the elements 
and process of an intrusion, and how to go about it. 
Certainly, he understood how to take on the back end and 
take the fruits of an intrusion, to then develop that and 
develop additional targets, and I think part of that was 
the interesting things like shopping carts where you get 
user IDs and passwords, this sort of thing because he 
understood it is an interprocess. 

Q. Did you find any evidence that Mr. Brown personally 
used those passwords to enter any place? 

A. Well, there is one chat. I think it was September 6, 
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2011, a chat with Burn, where there are passwords 
provided. In that chat it appears they are trying to 
figure out how — where to use the password, where to use 
the — 

Q. Is there any evidence — 

THE COURT: Okay, let -- this has been going on 
for sometime. Let him finish answering the question 
before you cut him off because otherwise the transcript 
will be incomplete. 

MR. SWIFT: Yes, Your Honor. 

THE COURT: Do not cut him off unless you wish to 
make an objection. 

MR. SWIFT: Yes, Your Honor. 
Q. (BY MR. SWIFT) Is there any evidence that he actually 
utilized those passwords on his computer, that Mr. Brown 
actually entered into any of those sites? 
A. Aside from the conversation, no. 
Q. There is no evidence? 
A. No . 

Q. Has Mr. Hammond — well, I am going to go back. 

Topiary was convicted you testified? 

A. That is my understanding he was convicted. 

Q. From the HBGary hack? 

A. I am not sure exactly what his guilty plea was 
related to or conviction was related to. So as I sit 
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here, I couldn't answer that question. 

Q. Are you aware he received two years? 

A. I am aware that he received on the order of two 

years; yes. 

Q. Sabu was convicted including his participation — 

MS. HEATH: Again, Your Honor, we object to the 
relevance as to relevant conduct of Barrett Brown. 

THE COURT: I think we may be going to is 
something I read as to perhaps the need for the Court to 
avoid unwarranted sentencing disparities with persons of 
similar conduct. I know I saw something like that in one 
of their filings. It may have relevance to that 
regard. To that extent, I think it has relevance and the 
Court will overrule it . 

Now, if the agent does not know what these 
individuals received, all he has to say is he does not 
know . 

Q. (BY MR. SWIFT) Are you aware of what Mr. Sabu or 
Mr. Monsignor received? 

A. I don't know exactly. I have a general idea. 
Q. What was the general idea? 
A. Something — time served. 
Q. Now -- 

MR. SWIFT: One moment. Your Honor. 

THE COURT: All right. 
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MR. SWIFT: I am coming to the end. 

(PAUSE IN PROCEEDINGS.) 
Q. (BY MR. SWIFT) The article that you referred to on 
HBGary, during that period that Mr. Brown — that was a 
satirical article, wasn't it? 

A. It perhaps could be viewed as satirical or a taunt. 
Q. Stephen Colbert did the same thing, didn't he? 

MS. HEATH: Your Honor, again, we would object 
to the relevance. 

MR. SWIFT: It's going towards whether that 
constitutes strategy-making fun of someone. 

THE COURT: Just a minute. Just a minute. Just a 
minute. Go ahead, Ms. Heath. 

MS. HEATH: We just object to the relevance of 
other journalism or other authors' statements with regard 
to some unknown topic. 

MR. SWIFT: It had to do with Mr. Barr ' s claims 
that he had compromised Anonymous, and the implication to 
this Court is Mr. Brown writes this satirical article 
that makes him the strategist and the overall architect. 

MS. HEATH: Your Honor, we object to testimony 
from Counsel . 

THE COURT: I would sustain that objection. The 
question or inquiry as to Stephen Colbert, the Court is 
going to sustain that objection. I think we are getting 
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far field . 

Q. (BY MR. SWIFT) Doxing. What is "doxing?" 
A. Doxing is publishing information about an individual. 
Q. Is doxing going on Google seeing what I can find out 
about somebody? 

A. Doxing would lead up to the ability to do that, so it 
is the doxing is the initial publication of that 
information . 

Q. Go to Google, maybe public records, sort of stuff TMZ 
does ? 

A. Sort of stuff who does? 
Q. The channel TMZ? 

A. I don't know if they do that or not. 
Q. Other journalistic organizations find mugshots, 
pictures that aren't flattering on the web, all kinds of 
information that is out there? 

A. Certainly, there is public information on the web, 

and then there is private information. 

Q. So doxing includes private information? 

A. Date of birth, social security numbers. 

Q. If that is on the web, it is publicly available; is 

it not? 

A. Normally, that would not be publicly available. 
Q. How does someone dox somebody? 

A. There are techniques for doing that they have to get 
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access to the information somehow and publish it. 

Q. Meaning publishing something out there in the public? 

A. It ends up in the public, yes. 

MR. SWIFT: No further questions. 

THE COURT: All right, thank you, Mr. Swift. 
Redirect, Ms. Heath. 

MS. HEATH: Yes, Your Honor. 

REDIRECT EXAMINATION 

Q. (BY MS. HEATH) Agent Smith, you were asked a lot 
about different conversations Mr. Brown had. Did you 
determine from your investigation and from some of the 
exhibits that were presented earlier in some cases 
Mr. Brown has public conversations and sometimes has 
private conversations? 
A. Absolutely. 

Q. And did you determine whether there were times when 
Mr. Brown intended to keep his conversations private or 
cove rt ? 

A. Yes, I think in a general sense looking at, for 
example. Project PM, it had activities that were publicly 
facing. There were people that were involved with those 
activities that appeared to be legitimate, and at the 
same time there was a set of covert activities that were 
going on, for example, some of the private messages, some 
of the e-mail conversations that we looked at where there 
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activities that aren't generally known occurring in that 
space. In particular, that is where the criminal 
activity occurred was it was a more private space. 
Q. And did you find times where Mr. Brown would make a 
certain representation in private to somebody and make 
perhaps the opposite assertion in a public conversation? 
A . Certainly . 

Q. Would there be times in the private conversation he 
would discuss something, but totally admit or deny that 
those occasions existed in a public conversation? 
A. I think there are examples of that. 

Q. Now, just to clarify the record, I think I asked 
about doing the forensics you reviewed. 
A. I reviewed the computers. 

Q. And during this period of time, we have shown some 
exhibits where Mr. Brown is stating that he is not a 
journalist any more, he left the journalistic life in 
2011 or at least during that period of time to act with 
Anonymous or possibly was a pseudo- j ournali st . When 
Mr. Brown was communicating with these individuals, was 
he communicating from what you could tell as a source of 
information or trying to gather information from other 
people ? 

A. With the journalists? 
Q . Correct . 
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A. He was being interviewed by journalists to provide 
information to them for their stories. 

Q. So not only was he interviewed online in interviews 
as we saw with that one video, he was also interviewed in 
e-mails or in chats? 
A . Yes . 

Q. You were asked about some of Mr. Brown's conspirators 
with regard to some other hacks and what sentences they 
got. At this time you are not here to tell the judge 
what was the underlying offenses to which they were 
convicted, what the maximum sentences were, or what facts 
were presented to the judge whether or not those 
individuals — 

THE COURT: Ms. Heath, let's reask that 
question. You have asked about four or five questions in 
one . 

MS. HEATH: Yes, Your Honor. 
Q. (BY MS. HEATH) With regard to Barrett Brown's 
co-conspirators — 

MR. SWIFT: Objection; facts not in evidence, 
not established that it was conspiracy. He was not 
charged with a conspiracy on his part. 

THE COURT: I would sustain the objection 
insofar as a conspiracy is concerned, but you opened the 
door Mr. Swift when you brought those other individuals 
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up, and I will allow her to explore that line of 
questioning. I sustain the objection as to the word 
conspiracy or conspiratorial conduct. The objection is 
well taken. As far as the subject matter, the objection 
is overruled because as the Court stated, you did open 
the door on that issue. 

MS. HEATH: Your Honor, if I may -- I will 
reword the question. 

Q. (BY MS. HEATH) The individuals that you were asked 
about as far as the sentences they received, were these 
individuals that were involved in jointly undertaken 
activities with Barrett Brown? 

A. Certainly, they were all participating in the channel 
with HBGary. Mr. Brown was bringing people in for them 
to talk to those people and in some cases threaten them. 
Mr. Brown made suggestions to some of these people. For 
example, he in a private message to Sabu at the time of 
HBGary suggested that Sabu require that HBGary make a 
donation to Bradley Manning in exchange for relief in the 
situation, as an example. 

Q. They would stop any further hacking or destruction if 

HBGary would make a donation for Mr. Barr? 

A. It wasn't clear what relief they would give, but 

planting the suggestion requiring payment to 

Mr. Manning's defense in exchange for some benefit. 
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Q. So these individuals worked together with Mr. Brown 
on occasion for various goals that they set? 
A . Yes . 

Q. Now, with regard to the sentences they received, do 
you have any information regarding what the individuals 
were actually charged with? 

A. I am not familiar with what they are charged with or 
the situation regarding their convictions. I am aware to 
the point that, for example, the British were handled in 
British courts. To the best of my knowledge, they have 
not been addressed in the United States Court system for 
crimes that may have been committed here. It is my 
understanding that Mr. Monsignor was sentenced and his 
sentence was adjusted relative to his cooperation. 
Q. With regard to cooperation, you don't know the 
details of the cooperation that was presented to the 
Court for any of these individual sentences? 
A. Just from what I read in the media. I understand it 
was recommended that he provided extensive cooperation. 
Q. And you don't know what other evidence would have 
been presented to the judge to come up with whatever 
sentences they came up with? 
A . No . 

Q. Now, you were asked often about whether Mr. Brown was 
actually involved in the hack. Is there more to a hack 
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and intrusion than the initial execution of whatever 
malware is entered to cause the vulnerability to be 
exploited? 

A. As I stated before, I think you can look at sort of 
the phases of the hack starting with HBGary . Mr. Brown 
was involved as far as I can see not so much with the 
technical aspects of the hack, but with dealing with the 
information with providing, for example, advice on how to 
proceed with the intrusion. At one point, he actually 
decided he needed to hide his laptop from one of the 
conversations related to his conversations. Some of the 
other examples we talked about, for example, 
vulnerability scans it is clear he progressed in 
understanding of hacking being able to obtain 
vulnerability scans, find people and describe what the 
vulnerability scan meant to find somebody who might have 
the capability to find and exploit to take advantage of 
those vulnerabilities. 

Q. Specifically, with regard to the Stratfor hack which 
is the item or the activity that Mr. Brown pled guilty 
to, what was Mr. Brown's role with regard to the ongoing 
hack of Stratfor? 

A. Well, he became aware and at the time he became 
aware, he started making statements about that intrusion, 
and he was admonished by the people involved with the 
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intrusion in particular Jerry Hammond telling him it was 
ongoing, and he was going to mess it up. So as a result 
he basically didn't make any further comments about the 
intrusion at that point, and they were going to continue 
with what they were doing. 

Q. Did he obtain any of the stolen data from that? 
A. He did get the stolen data we talked about, the 
credit cards in this case that came from Stratfor, the 
account information including the account names, the user 
name, the name of the person, the hash password. 

It is my understanding all of those passwords were 
subsequently cracked. What I mean by that is hash 
passwords, that is, passwords stored in a hash are 
encrypted, one way encryption. There are techniques for 
guessing what those passwords may be and given this 
information in the public domain, then set out trying to 
crack these passwords. The problem — the big problem 
with that, and we see this much today where these 
accounts that — these accounts people have, they tend to 
use the same password in multiple places, so this creates 
vulnerabilities in many places. 

MR. SWIFT: I object to the answer as (A) 
nonrespons ive and (B) the witness previously testified 
that Mr. Brown had no knowledge prior to the start of the 
hack . 
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THE COURT: The last part of the objection would 

go — 

MR. SWIFT: He also testified — 

THE COURT: Excuse me. When I am talking, do 
not interrupt me, sir. If you have something else to 
say, the Court will allow you to say it. Let me go ahead 
and make my initial ruling as to the testimony that you 
are considering is inconsistent. That goes more to the 
weight, and the Court will review that, and I do agree 
with you the question has been answered, and at some 
point Agent Smith has become narrative, so I do sustain 
the ob j ect ion . 

Is there another objection that you would like to 
make ? 

MR. SWIFT: I also object because he was not the 
case agent for the Stratfor hack or have personal 
knowledge to testify regarding how the Stratfor hack was 
conduct ed . 

THE COURT: I am going to overrule that because 
this is a sentencing hearing and Rule 1101 of the Federal 
Rules of Evidence, one of the exclusions is that the 
Federal Rules of Evidence do not apply at sentencing. 
The test is whether or not the information has sufficient 
indicia of reliability, therefore, what is normally 
excluded during the course of a trial may be received by 
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the Court at a hearing if it has sufficient indicia of 
reliability. In other words, hearsay unless it falls 
within the hearsay exception is if it has sufficient 
indicia of reliability. That aspect of your objection is 
overruled. Let's move forward. 

Q. (BY MS. HEATH) Further, with regard to the Stratfor 
hack and Mr. Brown's involvement, you indicated he got 
some of the stolen property; correct? 
A . Correct . 

Q. Does that include both the credit card information 
that you were explaining and personal identifiers as well 
as e-mails later? 

A. Well, e-mail addresses in this file. I also found 

customer lists related to Stratfor on the computer. 

Q. And with regard to the credit card information, what 

information or what volume of information did he receive? 

A. Approximately 5000 that were in that file. 

Q. And only the B and Cs? 

A. People? I believe it was definitely B and Cs, 
something like that . 

Q. With regard to that group of credit card holders, 
were you able to determine what credit cards had been 
used after Mr. Brown made those — made that information 
public? 

A. So I filtered the list extensively to take out 

Charyse C. Crawford, CSR, RPR 
1100 Commerce, Room 1544, Dallas, Texas 75242 
(214)753-2373 Telephone 
Charyse_Crawford@txnd.uscourts.gov or charysecrawford@gmail.com 



1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 



136 



expired cards, cards that didn't have authentication 

codes and got it down to just the set of cards that had 

all the information related to being able to use it from 

the period after Mr. Brown came to possess it. 

Q. And how many credit cards were actually used? 

A. It was on the order of a hundred more or less. I 

don't recall the exact number, total losses about $18,000 

on those accounts. 

Q. $18,000, 100 to 113 cards? 

A. Something on that order. 

Q. And you are not saying Mr. Brown used these cards? 
A. No, I am not saying that. 

Q. And from the evidence that you reviewed earlier today 
and the e-mails or chats, were there occasions Mr. Brown 
would give advice to people on how to use credit cards? 
A. Certainly. The example we discussed before which 
occurred after Stratfor, that conversation where he is 
explaining the ins and outs of exploiting credit cards. 

MS. HEATH: Your Honor, we pass the witness. 

THE COURT: All right, thank you, Ms. Heath. 
Recross, Mr. Swift. 

R E C R O S S EXAMINATION 
Q. (BY MR. SWIFT) Let's go back to the credit cards. 
You said Mr. Brown made them public. How do you do so? 
A. I said he obtained credit cards we were discussing. 
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Q. You said that Mr. Brown made credit card information 
public that was utilized. 

A. He certainly downloaded the cards on his computer. 
He transferred a link to the cards — 
Q. Okay, the link? 
A . Yes, okay . 

Q. That link existed to an already existing public site; 
did it not? 

A. Yes, it was on a site at that point. 

Q. So all the credit card numbers are already out in the 

public? 

A. Uh-huh. 

Q. Okay. 

THE COURT: Is that a yes? 

THE WITNESS: Yes, sir; that's correct. 
Q. (BY MR. SWIFT) All the credit card numbers are in the 
public . 

A. That's correct. 

Q. They are available to the general public. 
A . Yes . 

Q. Mr. Brown pasted the link in Project PM that went to 
that document . 
A . Yes . 

Q. Did he identify it as credit cards here? 

A. He did not identify it when he pasted it in Project 
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PM as I recall. 

Q. Right after he received that document, he actually on 

the IRC chat asked what was that; is that correct? 

A. They had been identified previously in the channel as 

being five thousand cards. He did ask that question. 

Q. He asked it after he received it? 

A. He did ask after he received it. 

Q. When he got the document, the implication is he 
didn't know what was in it? 

A. He asked for clarification of what was in it. 

Q. There is no — there is no evidence that he ever used 

any of those credit cards? 

A . No , sir. 

Q. And you say — 

THE COURT: What was your answer on that? 

THE WITNESS: I said no, sir. 

THE COURT: So your testimony is there is no 
evidence that Mr. Brown ever used any of those credit 
cards ? 

THE WITNESS: That is correct, sir. 

THE COURT: All right. 
Q. (BY MR. SWIFT) There is no evidence in part that 
based upon his transfer someone was able to get access to 
it who would not otherwise have it, in other words, his 
posting of a link? 
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A. I think what we are talking about here is he knew 
about it beforehand that there were accounts being 
compromi s ed . 

Q. That is not who we are talking about. I will 
rephrase the question. 
A. Okay. 

Q. Okay, Mr. Brown posted a link. That link if I 
clicked on it would lead me to credit cards . 
A. That's correct. 

Q. Is there evidence that anyone gained access to those 

credit cards by clicking that link? 

A. I could not tell you that is the case. 

Q. So there is no evidence that any of the charges to 

those credit cards were made by someone utilizing the 

path that Mr. Brown had provided? 

A. That's correct. 

Q. Now, when were the charges on those credit cards 
made ? 

A. It — at various times following the point in time in 

which Mr. Brown became aware of the intrusion. 

Q. Following the point where he became aware of the 

intrusion . 

A . Yes . 

Q. Let's go — when — what is the earliest date on any 
of the credit cards that was charged? 
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A. For fraudulent transactions? 
Q . Yes . 

A. I don't have the list in front of me, but I would 
expect it would be something along the order of December 
23, 2011. 

Q. What is the latest date? 

A. I do not know what the latest date was. 

Q. Mr. Brown became aware sometime on December 23rd that 
there was a hack going on? 
A. That's my recollection. 

Q. Did he have any knowledge at that point that they 
were credit cards? 

A. I don't know that he knew they were credit cards at 
that point . 

Q. So the credit cards and the $18,000 that you just 
testified about — 
A. Uh-huh. 

Q. — had already started to be charged before he had 
any knowledge? 

A. I think that is true, yes. 

Q. And you can't say when the last charge on them was 
made ? 
A . No . 

Q. And many of the credit cards were expired or 
unavailable and couldn't actually be used? 
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A. Right, because I think because the intrusion was 
detected earlier, there may have been some steps taken to 
mitigate the losses on the accounts. Some of the 
accounts had been canceled, for example. 

Q. In fact, the FBI was aware of the ongoing intrusion; 
correct ? 

A. I think they took steps to mitigate this, yes. 

Q. So based upon that — many of the credit cards had 

been no — were no longer valid? 

A. Yes, by the time that Mr. Brown gained access, yes, 
that is true . 

Q. Out of the total of 5,550, how many had the FBI 
rendered moot? 

A. I don't know how to answer that question. 

MR. SWIFT: I don't have any further questions. 

THE COURT: All right, thank you, Mr. Swift. 

MS. HEATH: Your Honor, if I may ask a few 
clarifying questions just on the credit cards. 

THE COURT: All right, this will be the last 
round. Usually, I allow direct, cross, redirect, and 
recross. I will allow one other round as to the credit 
cards, and if Mr. Swift has any follow-up questions, I 
will allow him to ask his questions. You may proceed. 

REDIRECT EXAMINATION 
Q. (BY MS. HEATH) As to the 113 cards which had $18,000 
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in loss, that information was provided to probation, 

those cards were only used after Mr. Brown posted the 
link . 

THE COURT: Okay, this is a crucial question. 
Rephrase that question. 

Q. (BY MS. HEATH) When was -- you explained briefly how 
you determined or narrowed it down to 113 cards. What 
were the parameters of those 113 cards that you focused 
on? 

A. Right. They were sufficiently complete to enable a 
charge on the account, and they were having fraudulent 
activity after Mr. Brown possessed them and transferred 
the link . 

Q. Okay, it was after he had them and made them public? 
A . Correct . 

Q. Now, a lot of other cards have previously been used 
which is what I think the defense was asking you about; 
is that correct? 

A. Yes, there was fraud on these accounts before that 
date . 

Q. In fact, what is the figure that has been determined 
or the entirety of the loss attributed to those cards? 
A. It was a large number, $700,000 or a million dollars 
somewhere in that range. 

Q. You narrowed it down to the $18,000 of fraudulent 
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charges on 113 cards that Mr. Brown had received and made 

public? 

A . Yes . 

MS. HEATH: Your Honor, we pass the witness. 
THE COURT: All right, thank you, Ms. Heath. 
R E C R O S S EXAMINATION 

Q. (BY MR. SWIFT) Let me understand two things. First, 
all of those cards when Mr. Brown received them were 
already public; correct? 

A. They were on his site on the internet, so yes. 
Q. But they were already on another public internet 
site. 

A. That is correct. 

Q. So I didn't need to go to Mr. Brown to get those 
credit cards? 

A. You had to know where to find him. 

Q. Lots of people were watching, weren't they? 

A . I don ' t know . 

Q. You have no information because Mr. Brown published a 
link to them that anybody could access them? 
A. No. Well, let me clarify. There was somebody on the 
channel when he published it who acknowledged that he had 
posted that. Actually, I don't recall the exact language 
in the channel at that time, but the person who was in 
there actually recognized that it was something of value, 
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and I think the response was something along the lines 
of, you know. Merry Christmas indicating it had value. I 
would have to look at the exact language to be specific. 
Q. Were you able to trace and see whether they went to 
that point? 

A. I can't tell you that they downloaded from that 
link. They acknowledged the posting to the link with 
sort of a positive affirmation. 

Q. Last point. Mr. Brown prior to — he asked the 
question what was in that after he posted the link; did 
he not? 

A. I am not sure as I sit here. That may be possible. 
Q. And you said that the $18,000, that started somewhere 
on the — used through the 23rd? 

A. From the time — so from the time he possessed these 
cards forward to the point in which we determined we 
asked the question about the fraud. It could be there 
was fraud subsequent to that. It could be there is still 
fraud in the accounts. I can't tell you when it ends or 
if it ever ends . 

Q. And you can't tell whether the people who were 
charging it after him had already possessed it and had 
been charging it for sometime, using those credit cards? 
A. I am sorry. I didn't catch your question. 
Q. Did you eliminate — can you tell that the persons 
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who were making the charges on those cards whether they 
held them before Mr. Brown possessed them? 
A. There may have been fraud in those accounts before 
Mr. Brown possessed some of them. It is possible. 

MR. SWIFT: No further questions. 

THE COURT: Okay, just one minute. Let me 
review some notes I have here. 

(PAUSE IN PROCEEDINGS.) 

THE COURT: I take it this last line of questions 
goes to the number of victims; is that correct? 
MS. HEATH: Yes, Your Honor. 

THE COURT: And it would go to an enhancement. 
What is the government's position as to what level of 
enhancement is appropriate? 

MS. HEATH: Your Honor, the latest decision or 
recommendation by probation is something that would be 
very obtainable with the evidence that is here. The 
government could tell the Court that there are over 250 
victims because each and every individual in these 
companies whose e-mail was taken and the people who had 
been called and individual companies and then, of course, 
Mr. Brown threatening law enforcement in general and 
threatening the agent and told him as well as the credit 
cards, but in abundance of caution the government would 
say that the appropriate amount is between 50 and 250. I 
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think that is the range, isn't it? 50 to 250? 

THE COURT: Well, the two-level enhancement for 
10 or more; four levels for 50 or more; and six levels 
for over 250, that is my understanding of what the law 
i s . 

MS. HEATH: The government would say it is very 
appropriate to do the over 50, but under 250. 

THE COURT: Agent Smith, you may step down. 

THE WITNESS: Thank you, sir. 
(WITNESS EXCUSED.) 

THE COURT: Okay, let's go ahead and take that 
issue up now. 

Ms. Cadeddu, were you going to say something? 

MS. CADEDDU: Your Honor, I was going to say 
since I am handling the guidelines, that is something I 
am fully prepared to address as soon as we are done with 
the testimony. 

THE COURT: I believe we are. Any further 
testimony by either side on any issue? 

MR. SWIFT: We have our witness that we wanted to 
call. Your Honor. 

THE COURT: Is it relating to this enhancement or 

not ? 

MR. SWIFT: It is related to all of the relevant 
conduct regarding strategist . 
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THE COURT: No. Is it related to the victims? 
That is what we are on right now. 

MR. SWIFT: No, Your Honor. 

THE COURT: All right, then let's hold off on 
that witness. I will take that witness up after we 
discuss this issue concerning the number of victims. 

Ms. Heath, since there has been an objection by the 
defense, the government has the burden on that. Is there 
any further argument that you would like to make in that 
regard? 

MS. HEATH: Your Honor, simply as — would you 
like me at the podium or the table? 

THE COURT: You can talk from the table. Talk 
loudly enough so I can hear you and Ms . Crawford can hear 
you . 

MS. HEATH: Yes, Your Honor, with regard to the 
number of victims, as I said I think the evidence would 
support a finding of more than 250 in that the 
individuals who were affected by the hacks that Mr. Brown 
was participating in includes the companies themselves. 

THE COURT: That would be three companies; is 
that correct? 

MS. HEATH: No, Your Honor. 

THE COURT: What are you talking about? 

MS. HEATH: We have HBGary, Special Forces, 
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Strategic Forecasting, Combined Systems, Puckett and 
Faraj, and additional noncompany victims, the individuals 
whose site was taken down. 

THE COURT: All right, I thought the latest 
position of the government was that there were 113 
vi ct ims . 

MS. HEATH: There are 113 people's credit cards 
who were published by Mr. Brown whose cards were 
fraudulently used. That is where we come up with 50 and 
250 . 

THE COURT: What evidence do you have to 
establish that there were 113 identifiable victims as 
opposed to credit card accounts? 

MS. HEATH: Those credit card accounts come from 
identifiable victims. The agent indicated that he went 
through to determine that there was an active card, that 
those cards were cards within the grouping of cards that 
Mr. Brown received, and that he then made public to his 
Project PM, his group of individuals. The 113, each of 
them had a credit card holder that was named, their 
addresses were given, e-mail accounts, passwords, credit 
card information, thousands of CVV or similar 
identifiers, and the different banks or the credit card 
companies had received reports of fraud from those credit 
card holders, so we confirmed all of those with those 
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113 . 

THE COURT: All right. Okay, Ms. Heath, are you 
familiar with the Fifth Circuit decision in United States 
vs. Onenese, which is found 542 F . App ' x 427? 

MS. HEATH: Not right offhand. Your Honor. I am 
sure I have read it . 

THE COURT: I am raising the issue because it has 
come up in another case that the Court has had with the 
government when you talk about a number of victims. The 
Fifth Circuit has made it clear that when you are talking 
about in this context a means of identification, that 
means that an individual's identification must actually 
be used for that individual to count as a victim. 

MS. HEATH: Yes, Your Honor. 

THE COURT: We are not talking about possession 
or transfer . 

MS. HEATH: Yes, Your Honor. 

THE COURT: We are talking about something that 
is actually used, and the Fifth Circuit points out that 
the word "used" is contrasted with the term possessed. 
In that particular case, the government took the position 
that an orange notebook found in this individual's 
apartment supported the 50-victims sentencing 
enhancement, and that particular notebook to which the 
government contained birth dates, social security 
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numbers, and addresses of approximately one hundred 
people, and the Fifth Circuit held in that case as 
follows, "We find that it was clear error to rely on the 
government's argument that the orange notebook indicates 
that there were more than 250 victims. There is simply 
little to no evidence in the record suggesting that the 
defendants victimized all the people listed in the 
notebook . " 

Now, the Court went on to say, "The government in 
its brief to the Court mentioned only 19 victims by 
name." And the Court further said, "If the government 
cannot point to 50 identifiable victims who were, in 
fact, defrauded or whose identities were used, it should 
have conceded as much." 

Does the Court have the names of 50 or more 
identifiable victims whose cards were actually used or 
who were defrauded? 

MS. HEATH: Yes, Your Honor. I don't have them 
here at this moment, but yes, we went through the 5,500 
cardholder accounts that Mr. Brown received. From those 
we identified 113 by name. In fact, many of those have 
been contacted because they would have been witnesses had 
we gone to trial. Many of them were named in the 
original indictment because we had contacted them and 
confirmed their loss. 
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Of that 113 — of that 113 are known credit card 
holders whose cards were used fraudulently after the time 
Mr. Brown had them in his possession and made them 
public. They were fraudulently used. It is confirmed by 
the credit card company and by the card holders to whom 
we have talked and I can supplement in a brief. I can 
provide the names of the card holders and their accounts. 

THE COURT: I do not have that right now. It 
can be filed. I do not have that right now, and I think 
the Fifth Circuit was clear that you had to have 
identifiable victims and not necessarily credit card 
numbers because what the Fifth Circuit said was the way 
you identify them is through name, date of birth, social 
security number, those kind of things. 

MS. HEATH: Yes, Your Honor. We have the 
names. We have addresses, and we have phone numbers or 
e-mail addresses. Of course, we have the credit card 
numbers . We have the credit card companies who have 
verified that those cards were valid at the time and that 
they suffered fraud, and they were real individuals. 

As I said we have talked to some. I can provide a 
full name. I would want those names to be kept under 
seal with the Court because they would be victims and 
that information should not be made public. 

THE COURT: I mentioned they should be filed 
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under seal. The next question would to be the defense, 
does the defense have that information? 

MS. HEATH: Yes, Your Honor. 

MR. SWIFT: No, we do not. 

MS. HEATH: We provided that spread sheet, the 
Excel Spreadsheet . 

MR. SWIFT: 19 people, not 113. 

MS. CADEDDU: I have seen a lot of documents in 
this case. Your Honor. I can't swear that I have seen 
it. I don't recall a document with 119 names on it. 

MS. HEATH: It would have -- it is around that 
number. It should be a spreadsheet with the verified 
losses from the different credit card companies because 
remember we were going back earlier than you needed that 
information . 

MS. CADEDDU: I can't swear to the Court I have 
not seen it, but I don't recall it off the top of my 
head . 

THE COURT: Let me ask this question, 
Ms. Cadeddu. Since you are handling the guidelines, if 
what Ms. Heath is saying is correct, why would not the 
government have carried its burden? What she has 
represented to the Court is that she can produce to the 
Court or she has a document that shows more than 100 
people whose names are connected with specific credit 
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card numbers. In other words, she has identifiable 
victims which is what the Fifth Circuit requires. 

If that information exists, then tell me why the four 
level enhancement would got apply. 

MS. CADEDDU: Yes, Your Honor, certainly. That 
is because we are skipping some earlier steps that we 
have to go through here that are required. The question 
here actually is before that victim enhancement can even 
be applied. The guidelines say that there must be a 
determination of whether the offense involved the 
production or trafficking of any unauthorized access 
device, so the offense itself has to involve the 
production or the trafficking of that unauthorized access 
device. And before we can say that the offense itself 
involved — we are talking here about the offense that 
Mr. Brown was convicted of, so the question here is one 
of whether the government has made this generalized 
argument about relevant conduct . 

What we have to keep in mind is the offense conduct 
is accessory after the fact to the unauthorized access of 
protected computer. There are rules, special rules that 
apply in the guidelines for factual findings or for the 
application of relevant conduct, rules in accessory after 
the fact case, and we completely skipped over that 
requirement . 
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Guidelines Section IBl . 3 says we cannot add a 
special offense characteristic unless the defendant knew 
or have reason to know that the relevant conduct being 
assessed there with the special offense characteristics 
actually took place. 

The evidence here, the only evidence in the record is 
that Mr. Brown when he posted the link did not know what 
was behind it . We have the IRC chat log actually 
excerpted in our sentencing memo for the Court ' s 
reference, but there is also a real causation issue 
here. The government keeps saying Mr. Brown had 
possession of the credit cards and then made them 
public . 

Mr. Brown linked to a public site. He posted a link 
to a site that was public. The credit cards were already 
public when he received that information. So the 
government, that is, a misrepresentation to say that 
these losses occurred only after he made this information 
public. The information was already in the public 
domain. So what the government is seeking to do here, in 
fact, is to assess liability for Mr. Brown for linking to 
information that was already in the public domain and 
that has real serious problematic repercussions for 
journalists, for researchers, for all kinds of people who 
link to information, and so I would say that the 
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government has not met its burden under 1B1.3 to meet the 
special requirements that are necessary in order to 
assess a special offense characteristic. We have thought 
even that the government can't prove that it is an 
offense involving the trafficking of an unauthorized 
access device in the first instance. Then the question 
is whether it has provided information about the names 
and identifiers of the victims is irrelevant. 

Moreover, if the government has not proved that the 
offense involves the production or trafficking of an 
unauthorized access device, we contend is true here, then 
the two-point enhancement for trafficking in an 
unauthorized access device is similarly impermissible. 
So what I would say is we skipped that internal step and 
went straight to the question whether the government 
provided appropriate identifying information. I don't 
believe that the government can meet the requirement of 
IBI . 3 and prove that this relevant conduct is even 
attributable to Mr. Brown, so that would be the essence 
of my argument. 

THE COURT: All right, thank you, Ms. Cadeddu. 
Ms. Heath, what is the government's response or reply, I 
should say? 

MS. HEATH: Yes, Your Honor, part of the United 
States Sentencing Guidelines 1B1.3 also provides the 
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Defendant is accountable for all reasonable foreseeable 
acts and omissions and acts of others in the jointly 
undertaken activity. I think from the evidence presented 
today, it is apparent that Mr. Brown was involved in 
jointly undertaken criminal activity with other 
individual s . 

With regards specifically to these 113, if that is the 
actual number — with regard to those — 

THE COURT: Connect the dots for me. I do not 
want general statement. I want you to connect the dots 
and show how he is linked to this. So that — convince 
the Court that he is linked to this and do so by 
connecting the dots with as much as specificity as you 
can as opposed to a general statement . 

MS. HEATH: Yes, Your Honor, with regard to 
Mr. Brown, he was aware that the Stratfor hack was 
occurring. He was told while it was occurring there 
would be credit cards and e-mails . He knew that before 
he got the credit cards. When he received the link, he 
downloaded into his computer the 5,550 or whatever that 
number was all the Bs and Cs in the credit cards . He 
downloaded that into his computer. He has it in his 
possession on his computer. It is not on some site 
somewhere, but that is where the link came from, from a 
site . 
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He took the link from a more public chat room, IRC 
channel, to his own group, the Project PM IRC channel for 
those individuals to do with what they want. From the 
information provided to the Court today, it is reasonably 
foreseeable to Mr. Brown that these credit cards in 
Stratfor which had already been abused to the tune of 
hundreds of thousands of dollars before he even probably 
transferred them or trafficked in them to his Project PM 
site is reasonably foreseeable that people would continue 
to use them. 

We have evidence that Mr. Brown gives advice to 
individuals on how to use credit cards, give them to 
charities, but give them to charities overseas. Don't 
give them to charities where they have to charge back. 
The 113 comes from the actual credit card holders that we 
can identify that suffered fraudulent use after the point 
in time when Mr. Brown trafficked in them or transferred 
them to his Project PM, transferred the link to his 
Project PM site. 

We do have the identifiable victims by name, 
address, telephone number, e-mail address. We have the 
identifiable credit card number with CVV . We made sure 
they had the CVV. We made sure they were active accounts 
and had been defrauded pursuant to either the credit 
cardholder telling us and filing a fraudulent report with 
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the credit card company or the credit card company 
confirming the fraudulent use. 

THE COURT: All right, have you responded to all 
of Ms. Cadeddu ' s argument? 

MS. HEATH: Yes, Your Honor, if the Court 
desires both sides, I am sure we would be willing to 
brief this issue. 

THE COURT: I don't think I need any further 
briefing. I just need pinpoint argument. 

MS. CADEDDU: May I reply. Your Honor? 

THE COURT: Just one second, Ms. Cadeddu. 

MS. CADEDDU: Of course. 

THE COURT: Ms. Heath, there were a couple 
arguments made by Ms. Cadeddu, maybe you addressed them 
and maybe I missed them, but one argument that the 
defense is making is that it is unfair to assess 
liability against Mr. Brown for something that was 
already quote, unquote, in the public domain and this is 
a reference to the credit cards. Did you address that 
issue? 

MS. HEATH: Yes, Your Honor, once an item such 
as a credit card is stolen, it remains a stolen item. It 
doesn't matter how many hands it falls into as long as 
the individual knows they are dealing with stolen 
merchandise. It would be the same as taking — somebody 
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stealing your car and leaving it on a corner. The next 
person steals it further and somebody else steals it 
again. It is stolen property. So the government's 
position is that regardless of whether or not it had been 
made public by somebody else, that somebody else did the 
same thing Mr. Brown did. Mr. Brown took material, data, 
credit card information that he understood to be stolen 
and purposefully trafficked in it to another location for 
other people to use. 

There is no reason why he would need the credit card 
information for any legitimate means. He took it for the 
purposes as could be shown before to — as can be shown 
before where he was encouraging people to use the credit 
card information and asking for credit card information 
in other chats. 

THE COURT: The other argument made by 
Ms. Cadeddu or one of the other arguments was certain, 
special requirements had to be met when you are talking 
about trafficking of an unauthorized access device. Has 
the government responded to her argument in this regard? 

MS. HEATH: I believe that went to -- I believe 
it went to the possession of the actual stolen data. 

THE COURT: I want make certain you addressed 
it, because the parties have already done one round of 
written briefing, and I am giving the parties an 
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opportunity to address the argument. I am not going to 
allow further briefing on this. I am giving the parties 
the opportunity now to tell me what they have to say on 
any particular point because when we come back in January 
there will be rulings by the Court and there will be 
sentencing . 

MS. HEATH: Yes, Your Honor. 

THE COURT: Unless there is something unforeseen, 
there will be no further evidentiary matters considered 
by Court in January. Now, let me ask you this. There 
seems to be some dispute with respect to the information 
concerning the 113 victims or so. If that information 
has not been provided to the defense, it needs to be 
provided to the defense within the next week — within 
the next seven days, so they can look at that 
information, and we will not have a delay regarding that 
issue when we come back for sentencing on the 22nd of 
January . 

MS. HEATH: Yes, Your Honor. 

THE COURT: As stated before, let met make clear 
to the parties, that information is under seal. It is 
not to be in the public domain. It is not to be released 
to the media. I don't want anybody on any side getting 
cute with the Court or getting smug with the Court and 
finding a way to get it into the public domain. If that 
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happens, it may not be a pleasant day for the person who 
does it . 

I have no further questions at this time, Ms. Heath, 
unless you have something else you want add. 
MS. HEATH: No, Your Honor. 

THE COURT: All right, you wanted to reply, 
Ms . Cadeddu . 

MS. CADEDDU: I do. Your Honor. Okay, there are 
a couple of issues here. First, I know it was not in the 
initial argument, but I would like to address the stolen 
car analogy. She says stolen property is stolen property 
and remains stolen property. This case is — let's take 
the stolen car analogy. A group stole a car and went and 
parked it in a public place, and Mr. Brown posted a link 
and said go look at this public place; there is a stolen 
car there. Look at it for a lot of purposes that have 
nothing to do with credit cards, and I am going to talk 
about what he actually said in a second, but this is not 
a case where Mr. Brown went and got the car where it was 
and drove it around, used it at all. It is a case where 
he pointed to a location in a public place, and that I 
think is why it is such a problem to hold him accountable 
for trafficking in this case. 

The government's argument here is one that really 
should chill the bones of every journalist and every 
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researcher who is operating now because the government's 
argument is by linking to data that contains credit card 
information whether or not you know it is there and 
whether or not that information is already in the public 
domain, you are trafficking in credit card and cannot be 
held accountable for it. And even if as in this case 
there are charges filed, a motion to dismiss filed for 
failure to state an offense which is not ruled on before 
the government voluntarily dismissed all of those 
counts . 

I understand and know as we all do that a court can 
sentence based upon dismissed counts, but we see that in 
cases where, for example, it is a drug case and the 
government dismisses some of the counts and takes a plea 
as to one count and dismisses the other counts. 

This is not that kind of the case. What we are 
talking about is the government could not make its case 
on dismissed counts and seeking to hold him accountable 
for them after the fact in a way that will create 
enormous problems and enormous uncertainties for 
journalists and researchers around the country and around 
the world going forward. 

So I am really, I am very, very concerned about 
this. The other representation that the government made 
I think is problematic is Mr. Brown took this so that the 
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credit card information could be used. There is no 
evidence in the record of that. The only evidence that 
is in the record about the purpose for which — the 
purpose Mr. Brown had for this information is the IRC 
chat log that I would refer the Court to and this is on 
pages 10 and 11 of our sentencing memorandum. It is 
actually an excerpt. What you can see in this — I am 
not going to go through the entire chat, but what you can 
see here is that Mr. Brown — there is a progression of 
chats and linked to the Stratfor data is posted by a user 
on Anon Op's channel which is a public channel, and 
Mr. Brown takes that link and reposts in Project PM IRC 
and goes back and he asks, what exactly is in that 
download . 

So you know, the government says with no evidentiary 
support, you can't just say he knew there were credit 
cards in there. The government talked about a lot of 
credit card information. Agent Smith talked about that 
and Mr. Brown's comments on that that all involved 
different intrusions that all happened after the Stratfor 
hack. There is absolutely no information or data in the 
record as it stands right now that Mr. Brown knew that 
there were credit cards — knew there was credit card 
information in this download and the evidence is to the 
contrary because he, in fact, if the Court can see it, he 
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asks what is in this download, so the problem with this 
whole argument here is that the government is seeking to 
hold Mr. Brown accountable for — for trafficking in 
credit card information, for posting a link to a public 
website that had already been public before he even knew 
there was an intrusion and holding him accountable. The 
only evidence in the record is he did not know what was 
in the link that he published. 

THE COURT: All right, so you are saying he did 
not know, and the government is saying he is aware. 

MS. HEATH: The evidence in the record -- the 
only evidence the government has is an assertion that he 
knew . 

THE COURT: I am going to ask the government 
about that just as soon as you finish the argument. 

MS. CADEDDU: I am sure. Your Honor. I would 
point the Court on page 10 to the log where Barrett Brown 
links to that or posts that link on his Project PM 
channel and says here, BLB, what exactly is in that 
download. And actually that brings up a good point which 
is the person who responds says it is the BNC list of all 
clients that had CC info stored, name, address, and info 
attached to the company, five thousand entries, and 
Barrett Brown said, seriously; appreciate this greatly. 
This could potentially advance our investigation by 
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years, and another user says what is the exact data 
supposed to be for; what is the long game. And Barrett 
Brown says the e-mails will reveal a breakthrough about 
a lot of important subjects including specific info by 
state and other institutions issues that don't receive 
sufficient information or sufficient intention. It will 
be analyzed for info or relevance to several fundamental 
issues that we have been looking into since February 
which involved mass surveillance, cutting edge 
disinfotech, et cetera. 

So it's clear, clear as day from this chat that 
Mr. Brown's interest in this information is not for 
credit card information. What his interest is in order 
to crowd source an evaluation of the e-mails and evaluate 
what the company had been doing that he believed was 
improper. It was an investigative purpose. He is an 
investigative journalist, has always been, and so I just 
feel like this is really very problematic for researchers 
and journalists. 

THE COURT: All right, thank you, Ms. Cadeddu. 

MS. CADEDDU: Thank you. Your Honor. 

THE COURT: All right, Ms. Heath, I want to hone 
in on one point that Ms. Cadeddu has argued, and her 
position is that the government lacks the evidence on 
this area of inquiry. Her position is that the 
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government says that Mr. Brown knew or was aware if there 
was credit card information in the download. 

Now, and this is for both sides, I have a problem 
with the words he is aware or he knew unless there are 
underlying facts to support that because those statements 
are conclusions. 

So the question I would ask you, Ms. Heath, is this: 
What is the specific information from the government's 
point of view or set forth in the record that Mr. Brown 
knew there was credit card information in the download? 
I don't want a statement that he was aware. I want you 
to say. Judge, here are specific facts or here are facts 
from which you can reasonably infer that he was aware. 

MS. HEATH: Yes, Your Honor. In the chat that 
Ms. Cadeddu is referring that shows up on page 10 of 
their objections — I am sorry, their sentencing 
memorandum, if you go back a little further. Don't 
selectively start at that location. The content 
discussed as five thousand cards. The link that 
Mr. Barrett Brown actually posts is 

STRATFOR_FULL_B . TX . GZ . Mr. Brown got the Bs and Cs of 
the credit cards, so this Stratfor, underscore, full, 
underscore B, but prior to where they start with their 
chat there is a reference to the five thousand cards. 
This transaction occurred in December 2011. The 
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government Exhibit No. 50 prepared at the sentencing 
hearing is a discussion with the very same Mr. Hammond 
that was involved in the Stratfor hack. Government's 
Exhibit No. 50, Mr. Hammond and Mr. Brown are discussing 
getting credit card information from other locations. In 
fact, in that particular conversation, Mr. Hammond is 
providing Mr. Brown with credit card information, 
personal identifiers for a lot of people in this actual 
chat . 

Then there is some discussion where other evidence 
that the government has been provided today in its 
exhibits where Mr. Brown is specifically asking for 
credit card information and are receiving credit card 
information from other people, and/or giving advice to 
somebody who has stolen credit cards as to what to do 
with them. So there is more than sufficient evidence to 
show that Mr. Brown is very open to receiving credit card 
information, that he has received credit card information 
in the past. It was on his computer that he discussed 
getting credit card information from the hacks, and this 
is the actual chat prior to where the defendant states in 
their sentencing memorandum with the five thousand cards 
then Mr. Brown receives the link of the full V-Protects. 

He asks what is in it, and they clarify. It is not 
all the cards. It is the Bs and Cs, lists of all clients 
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that have credit card information stored, name, address, 
credit card information, and company. 

Mr. Brown responds seriously, appreciate this greatly. 
This could potentially advance our investigation by 
years. So he is acknowledging that he received it, that 
this is good stuff and advancing our investigation, and 
he has posted it in his Project PM site that we now from 
prior evidence here today was split into two factions, 
one the legitimate faction and one the — the criminal 
faction or the faction that would be committing crimes in 
furtherance of their objectives. 

That is the evidence that the government has from 
the exhibits presented here today in the sentencing as 
well as representation that this chat prior to where it 
starts indicates five thousand cards, and Mr. Brown it's 
is very clear that Mr. Brown knows he is getting cards. 
He is clarifying what card he is getting, so I don't 
think there is any mistake in that . 

Ms. Cadeddu references that later he talks about 
having gotten, talks about e-mails, that is when he is 
asked what is in the future, so what exactly is this data 
heist supposed to be. What is the long game? That is 
when he talks about getting the e-mails. This particular 
conversation early on is talking about the credit card. 
Later they are going to get the e-mails. 
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It is very clear that Mr. Brown understands what 
credit cards he is getting. He is just clarifying which 
ones. He got the Bs and Cs . 

THE COURT: All right, thank you. All right, we 
have been in here about two hours. It is time to take a 
break. We are going to take a 20-minute break. 
Mr. Swift, you said you have a witness? 

MR. SWIFT: I do, and she is from out of area. 
It would be extraordinarily difficult for her to come 
back . 

THE COURT: We will take up that witness -- 
MR. SWIFT: Thank you. 

THE COURT: -- so she will not have to make 
another trip here. All right, we will be in recess for 
twenty minutes. 

THE COURT SECURITY OFFICER: All rise. 
(A RECESS WAS HAD, AFTER WHICH THE FOLLOWING 
PROCEEDINGS WERE HAD IN OPEN COURT, WITH ALL PARTIES AND 
COUNSEL PRESENT . ) 

THE COURT: All right, sir, to expedite things 
you have a witness? 

MR. SWIFT: Yes, Your Honor, I do. 

THE COURT: Go ahead and call that witness. 

MR. SWIFT: I don't think the government is here. 
Your Honor . 



Charyse C. Crawford, CSR, RPR 
1100 Commerce, Room 1544, Dallas, Texas 75242 
(214)753-2373 Telephone 
Charyse_Crawford@txnd.uscourts.gov or charysecrawford@gmail.com 



1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 



170 



THE COURT: I am sorry. I didn't notice 
Ms. Heath was not here. Mr. Johnson, I am going to go 
sign a couple of orders. When Ms. Heath comes in, come 
get me . 

(A RECESS WAS HAD, AFTER WHICH THE FOLLOWING 
PROCEEDINGS WERE HAD IN OPEN COURT, WITH ALL PARTIES AND 
COUNSEL PRESENT.) 

THE COURT: All right, Mr. Swift call your 
witness, please. 

MR. SWIFT: We call to the stand Ms. Quinn 

Norton . 

THE COURT: Ma'am, raise your right hand, 

please . 

QUINN NORTON , 

having been first duly sworn to tell the truth, the whole 
truth, and nothing but the truth, testified as follows: 

THE COURT: Please be seated. 
All right, Mr. Swift, you may proceed. 

MR. SWIFT: Thank you. Your Honor. 

DIRECT EXAMINATION 
Q. (BY MR. SWIFT) Ms. Norton, how are you currently 
employed? 

A. I am a journalist. 

Q. What area of interest of the world do you cover? 

A. I have a number of beats. What I'm most well known 
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for is hacker culture, computer security, and internet 
culture including Anonymous . 

Q. When did you start covering Anonymous? 

A. I began researching them in 2010 and didn't begin 

writing about them until 2011. 

Q. Who have you written for? 

A. I have written for The Atlantic, Wired, New 
International, and other publications, but my primary 
long-term coverage was for Wired Magazine. 
Q. In writing about Anonymous, how did you do that? 
A. It was a somewhat complicated process. It is not 
very much like traditional journalism. Your sources are 
anonymous to you. You have to gain the trust of a 
community that is both secretive and have security 
issues, and also you are not going to be able to do any 
of the normal kind of fact checking things over titles, 
and so forth. So how I did it was I went to the places 
where they were, I got to know various people, I 
established trust. 

I already knew a lot about the culture because it 
came from a culture that I have been studying for twenty 
years. I was able to kind of use the culture to insert 
myself into the situation. 

Q. Did you work with anyone else initially? 
A . Yes . 
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Q. Who was that? 

A. I have been a friend and a colleague of Biella 
Coleman since the early 2000s. 
Q. Who is Ms. Coleman? 

A. Gabriella Coleman is the Wolf Chair of Technology at 
McGill University in Montreal. She is the leading 
anthropologist on Anonymous, and prior to that she worked 
on Freedom Open Source. We had an overlap for many 
years . 

Q. As part of your journalism, were you present — well, 
first can you explain to the Court what an IRC chat or 
IRC channel is? 

A. IRC has been around since the early 90's. It is a 
server upon which many simultaneous conversations take 
place, thousands of them, in fact, take place, and also 
people can private message each other, and anyone can set 
up one of these servers and make it available to the 
public. Anonymous had set up quite a few and also had 
channels on longstanding ones like FNET which has been 
around — I first learned of FNET in 1994 — so these 
are longstanding forms of communication well worked out. 
Q. So you might call them online meeting places? 
A. You could — you could call them that. 
Q. An online square or meeting room that you go to? 
A. They are kind of the internet contemporary version of 
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the 70's coffee house. They are places where all sorts 
of people, all sorts of levels of sophistication, class, 
culture can meet in common. They have that in common. 
They have that quality of meeting at a coffee house. 
Q. Now, does Anonymous — first, can you explain to the 
Court what Anonymous is? 

A. Oh, Anonymous is a culture, a collective that kind of 
gathers around certain values, but has very little 
necessarily in common with that. When I use a metaphor, 
I often say being from Anonymous is like being from 
California. There's definitely things — I say that 
because I am from California — there are definitely 
things that are common to those people, but there is very 
little you can say universal about them. 

Anonymous spans many nations. It spans many 
languages. It spans many political affiliations, but one 
of the common threads that ties everyone in Anonymous 
together is a belief in free speech and ant icensor ship . 
Q. When they talk about relevance here — rather than 
Anonymous or hacking activities — 
A. Uh-uh. 

Q. Were you familiar with those activities? 
A . I was. 

Q. Let's start with during your journalism, were you 
aware of or were you able to observe things about the 
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HBGary hack? 

A. I did observe part of the HBGary hack. I was lurking 
in the channel. Lurking is kind of like the internet 
culture term for listening. 
Q. Which channel? 

A. It obviously varies now, but the first one was the OP 
Ferry Channel and a couple more. I can't recall the 
names now where people were discussing the hacking 
ongoing . 

Q. So I want to distinguish there is — what is an 
operational channel? 

A. So — this gets — channels can slide in and out of 
being operational depending on how people are using the 
channel at the time. Again, these are as you say spaces 
or meeting points, and a meeting point can turn into a 
very serious meeting or casual meeting, and Anonymous — 
it can slide back and forth between them, an operational 
channel in this case. I vary specifically because of the 
nature of my coverage didn't want to be in the secret 
channels where people were actually planning the next 
part of intrusion, but there's other layers of that. 
There are layers of operational channels where people are 
theorizing or chatting or joking all the way down to 
people who are coordinating some kind of illegal attack 
or in many cases coordinating an intense civil operation 
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that isn't illegal. 

Q. Okay, so there were several channels for the HBGary 
chats ? 
A . Yes . 

Q. Are you familiar with the one that has been offered 
by the government? That channel? 

A. There is -- I think there is Op HBGary and HQ. 
Q . HQ? 

A. I am familiar with HQ. I was not in HQ. 

Q. Was HQ an operational channel? 

A. Probably, but I would have to speculate. 

Q. Were you aware of Mr. — of the hackers? Do you know 
which hackers were primarily responsible for the HBGary? 
A . I do . 

Q. Who were they? 

MS. HEATH: If we can get clarification of what 
she is basing this knowledge on. 

MR. SWIFT: I am happy to lay a little more 
f oundat ion . 

THE COURT: I agree. Lay a predicate question. 
MR. SWIFT: Yes. 
Q. (BY MR. SWIFT) Before answering who they are, how did 

you learn who the hackers were? 

A. Initially, I learned probably from consulting with 
Ms. Coleman. I also have interviewed two of them 

Charyse C. Crawford, CSR, RPR 
1100 Commerce, Room 1544, Dallas, Texas 75242 
(214)753-2373 Telephone 
Charyse_Crawford@txnd.uscourts.gov or charysecrawford@gmail.com 



1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 



176 



subsequent to their release from prison, and I also 
worked a bit with and read the materials from those who 
did the technical coverage of it. 

Q. By technical coverage, what do you mean by that? 
A. That went through the specifics on how — we have not 
gotten into this here, but went into the specifics on how 
that hack worked. 

Q. How they were able to access it, went through the 
logs they keep when they are working on them? 
A. That one was partly logs, but a lot was done with 
social engineering techniques, and some of it was done 
with Rainbow Tables which doesn't require logging a lot 
of steps where one ends up in a hack log which is a 
document I would review or ask an expert to help me 
review to continue step-by-step sequence of events. 
HBGary didn't have a normal hack log, but other hacks 
like Stratfor did. 

Q. Based upon interviews of participants and based upon 
your — 

A. — based upon core documents about Sabu as well — 
THE COURT: Okay, let him finish his question. 
THE WITNESS: Sorry. 
Q. (BY MR. SWIFT) Based upon your interviews of 
participants, based on review of materials that were 
later available regarding it, and based upon your review 
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of court documents, do you have a strong belief as to who 
part icipat ed? 
A . Yes . 

MR. SWIFT: Is there still an objection to her 
answering that given that we are not in the hearsay rules 
as Your Honor has pointed out? 

THE COURT: Well, what I said was hearsay is not 
necessarily excluded as long as it has sufficient indicia 
of reliability. 

MR. SWIFT: I would have to -- is there an 
objection? 

THE COURT: Well, let me ask the question. 
Ms. Heath, any further objection or are you renewing your 
objection? 

MS. HEATH: Yes, Your Honor, we will renew the 
objection and of course, going to relevance at this 
point, going into details as to how the hack happened or 
other individuals who are also involved in the hack. I 
think that has that has already come out . It is also 
repetitious of evidence that has already been presented. 

MR. SWIFT: Actually, it is not repetitious of 
any evidence. The agent said he didn't know. 

THE COURT: I am going to allow it at this 
time. I will carry the objection. As I stated before, 
if the Court finds it necessary or helpful to its 
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decision-making process as far as sentencing is concerned 
it will consider the evidence. If the Court does not 
deem it helpful, in other words, if the information does 
not assist the Court in coming to a conclusion as to 
sentencing, then the Court will disregard it. You may 
answer the question. 

Q. (BY MR. SWIFT) Who was involved? 

A. Topiary or Jake Davis, TFlow, and Sabu for sure. 
Q. Who are these? Topiary is Jake Davis. Who is TFlow? 
A. Mustafa — I am very bad with last names. I know 
him . 

Q. Who do you understand is Sabu? 
A. Hector Monsignor. 
Q. Anyone else? 

A. Those are the ones I know for sure. Possibly. 
Q. Was Mr. Brown part of the hack? 
A. To my knowledge, no. 

Q. Mr. Brown made a lot of statements in the media about 
the hack afterwards? 
A . Yes . 

Q. Did some of the hackers take objection to that? 
A . Yes . 

Q. How did they do so? 

A. They talked through the channel when he was around 
and when he wasn't. May I kind of widely answer that? 
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Q . Yes . 

A. Mr. Brown often spoke to the media after hacks and 
this was always a contentious issue. He was often seen 
as taking credit for things he had no part in. 
Q. Did some of them take actions with regards to him? 
A . Yes . 

Q. What action did they take? 

MS. HEATH: Your Honor, we object to relevance 
as to what action the media is taking because they are 
upset Mr. Brown is taking credit for things. 

MR. SWIFT: It is the hackers who are taking 
action in the question. 

THE COURT: What is the relevance? 

MR. SWIFT: The relevance goes to the idea 
Mr. Brown is being charged with these other hacks other 
than Stratfor, others as relevant conduct. I am trying 
to set out how much participation Mr. Brown had in what 
has been deemed as relevant conduct by the government, 
and I believe I am able to put on some evidence that the 
conduct is not particularly relevant to what he has pled 
guilty too. The government is arguing this is a joint 
criminal enterprise. 

THE COURT: Okay, Ms. Heath, why would not it be 
relevant or have some relevance to the issue of relevant 
conduct ? 
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MS. HEATH: The joint criminal enterprise 
relevant conduct would go to the activities of the 
individuals in the criminal conduct, the intrusion, the 
targeting, the taking of the stolen data, that sort of 
thing. What opinions the individuals have about each 
other or what their reactions are to statements they make 
in the media don't go to their actual criminal conduct or 
involvement in the offense, so it is extraneous to the 
issue at hand. 

MR. SWIFT: Your Honor, whether the people who 
actually conducted the hack consider Mr. Brown's 
statements taking credit for something I did, he had no 
part in, and played no role in the strategy or helped is 
absolutely relevant to whether he has relevant conduct. 
We have and the Defense will submit in a large portion on 
much of what is considered relevant conduct for 
Anonymous, Mr. Brown making statements to the media about 
things he did not participate in. He did not obtain, he 
did not strategize, did not play, and yet the government 
would have him sentenced for these things. 

The fact that I comment on it does not mean that I 
should be sentenced for it. We offer evidence from a 
journalist who was present in the chat room, talked with 
the conspirators, interviewed them about what happened as 
to Mr. Brown's participation in any of this. It is 
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absolutely relevant. If we want to talk solely about 
Stratfor, but we don't talk solely about Stratfor, I 
could limit it to his participation there because she was 
also present in that one. But I am trying to set out I 
have 50 — 63 e-mails of which I objected to their 
relevance, and the Court is considering it, so I feel 
honor bound because I don't know how you are going to 
consider it to present evidence as to what his actual 
participation was, his actual knowledge and 

responsibility for this conduct, and I wish I didn't have 
to. I would love to be talking about accessory after the 
fact, but we are here. 

THE COURT: Well, I guess it depends on whose ox 
is being gored. It is amazing how one party will object 
to one party's evidence, and then the other party will 
use similar evidence, and then there is an objection from 
the other side . 

I will tell both of you this. I am going to allow 
this testimony, but as with this testimony and some 
presented by the government there is going to be a lot 
shaved off because I don't think it goes to the central 
issue that the Court has to decide. I will allow it at 
this moment. The objection is overruled. 

Q. (BY MR. SWIFT) What was the attitude of the hackers 
that have participated or some of the hackers that 
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participated in HBGary? What actions did they take 
toward Mr. Brown for claiming credit? 

A. They kicked him out of the chat room, criticized him 
and kicked him out of the channel. 
Q. Let's move to Stratfor. 
A . All right . 

Q. When did you become aware of the Strategic Forces? 
A. Forecasting? 
Q. Forecasting. 

A. To my recollection late on the 23rd — actually, can 
I backtrack that a little bit? I was aware that a hack 
was ongoing somewhere around December 10th when the 
LulzSec — 

THE COURT: December 10th of what year? 

THE WITNESS: 2011. 
Q. (BY MR. SWIFT) How did you become aware? 
A. I was offered an exclusive by the AntiSec hackers, 
the LulzSec campaign. 
Q. Which hackers specifically? 

A. I can say Jeremy Hammond was one of them. I don't 
save handles for my contacts when I put them in my 
notes. I just use like 1, 2, 3, et cetera, but in my 
interviews, I definitely spoke to Jeremy Hammond and 
spoke to Sabu multiple times . 

Q. And were they aware that you were reporting it for 
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Wired on this? 
A . Yes . 

Q. And they offered you an exclusive? 
A . Yes . 

Q. What did an exclusive get you? 

A. So they offered me first access to the information 
and the story of how they were doing the hack under what 
is called an embargo, and I couldn't agree to it 
immediately. I have to go to my editor and ask them for 
permission to do this under an embargo which meant we 
would pick a date, and I would release all my information 
at that date, but I would hold my information until we 
got to that date, and it is a common journalistic 
negotiation under resources, so I was under embargo for 
Christmas Day. 

Q. And you didn't know who the target was? 
A. I didn't know who the target was. I knew there were 
multiple targets. I knew there was law enforcement focus 
on the targets, and they kind of gave — they dropped 
hints. They gave me things to go look at. They had 
woven in some of the stuff that they had gotten into and 
told me to go look frame by frame, part of them trolling 
me, but that is part of what you do when you cover 
Anonymous . 

Q. In other words, they are providing proof? 
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A. They are providing proof, but in a skewed way that 

they know is going to take a lot of my time. It is kind 

of providing proof and kind of breaking me. 

Q. On an Anonymous hack, when it is announced, is that 

when it happened? 

A. Rarely. 

Q. Can it have happened months ago? 

A. It could have happened years ago. Anywhere from 
weeks to years in many cases. That is rare. It is 
usually weeks to months, but — and where you begin the 
hack is kind of contentious, do you begin where you 
establish the vulnerability or do you begin when you 
start to go into the servers and do things. There are a 
lot of gray areas in this . Certainly with a large 
exfiltration usually has to have happened sometime before 
when I asked the AntiSec when they had hacked Stratfor, 
they hedged and they said it was less than six months, 
more than three or four. 
Q. Three or four? 
A. Weeks, sorry. 

Q. Three or four weeks at that point? 
A. Yeah; yeah. 

Q. How was this Stratfor hack based upon your reporting 
and interviewing selected? 

A. It was actually selected by another group within 
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Anonymous coming along to AntiSec, the vulnerability to 
Ant i Sec . 

Q. Which group was that? 

A. It was called Revolut ionSec . It is not — 

Q. Did Barrett Brown play any role in that? 

A. No. Revolut ionSec was extremely secretive. They 

didn't speak to any media. 

Q. Who did they provide it to? 

A . I am not sur e . 

Q. What's that? 

A. I'm not sure if it was Sabu or another member of 
AntiSec. There was between 60 and 80 members of AntiSec. 

THE COURT: So your answer is you don't know? 

THE WITNESS: Yes. I don't know. Thanks. 

THE COURT: Next question. 
Q. (BY MR. SWIFT) And so they target it at the time. 
You said you became aware on December 23rd. How did you 
become aware of who it was? 

A. I was — essentially, they dropped more and more 
hints. They were dropping hints initially towards what 
was going to be the Strategic Forces hack, and then a 
dramatic situation ensued in which they had a schedule. 
They were saying they had a schedule. 

THE COURT: Who is "they?" 

THE WITNESS: The AntiSec sources. 
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THE COURT: All right. 

THE WITNESS: My sources in the AntiSec who were 
communicating with me sometimes over IM, sometimes over 
IRC, so IM is one-on-one that is not server based, and 
IRC is server based, and initially they were dropping 
hints to me about the — not the Stratfor hack, but the 
Special Forces hack in saying that the big thing was 
coming — not Christmas Eve, but New Year's Eve, and then 
it turned out that everyone got really angry because 
somebody had told Mr. Brown, and Mr. Brown had began to 
talk about it, and they had to redo their schedule to 
release Stratfor first when they had wanted to release it 
last . 

Q. So somebody on one of these chat lines told 
Mr . Brown — 
A. Uh-huh. 

Q. — and he just starts blabbing about it? 
A . Yes . 

Q. And then what? 

A. They came back to me angrily and said we are having 
to redo the schedule, the first thing that we are hacking 
is Stratfor . 

Q. And is that actually that they are hacking or 
releasing? 

A. Releasing. My bad. 
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Q. How did they release it? 

A. They started — initially they started dumping credit 
cards into one of the main non-Ops public channels. They 
dumped a hack log, a few different — it was really there 
was a few different people working at this point, so they 
defaced the site. They dumped a hack log and a group of 
credit cards which they gave me, and the hack log came 
slightly after the credit cards. 

I had been up for like 20 hours at this point, and 
they made — well, eventually when they are really making 
the grand announcement, they put the data somewhere and 
link to it and take down the page and put up a 
defacement . 

MS. HEATH: Your Honor, this is a narrative. 
THE COURT: I agree. 

MS. HEATH: Let me -- it is getting far field. 

MR. SWIFT: I will pin it down. It does go to 
the credit cards . 

THE COURT: Well, okay, let's go ahead and cut to 
the chase . 

MR. SWIFT: Yes. 
Q. (BY MR. SWIFT) You said they dumped the credit cards? 
A . Yes . 

Q. How did they dump the credit cards? 
A. They were placed on a public website. 
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Q. Did they place it anywhere else? 

A. Well, they handed it to me. It was transferred to me 
via file transfer. 

Q. They transferred it to you. Do you know if they 
transferred it to others? 

A. I don't. It was placed in the public and transferred 
to me . 

Q. Why did they transfer it to you? 
A. As evidence of — 

MS. HEATH: Your Honor, may we approach the 
bench for a minute? 

THE COURT: You may. 
(THE FOLLOWING PROCEEDINGS WERE HAD AT THE BENCH, 
WITH ALL COUNSEL PRESENT.) 

MS. HEATH: Your Honor, in light of her 
admissions that she is receiving stolen property, I don't 
know if she has talked with Counsel, and they have 
allowed her to testify of her own accord. This is an 
issue. She is admitting to criminal conduct. 

MR. SWIFT: That is their position. Our position 
is this is a journalist. When they send you something, 
it is not . 

THE COURT: Okay, what are you saying? Are you 
asking the Court to warn her because — I mean? 

MS. HEATH: That is my concern because it is our 
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position . 

THE COURT: It is a slippery slope for the Court. 
MS. HEATH: Yes, I know. 

THE COURT: And has she talked with counsel? 
MS. HEATH: I don't know. 

THE COURT: See, here is the problem. If I make 
a statement like that without more evidence, it has the 
imprimatur of the Court. I don't want her to be 
intimidated or chilled by some statement that the Court 
makes. That is my concern. 

Now, if there is a legitimate concern that she may 
be implicating herself in criminal activity, that is of 
equal concern to the Court . I do not know enough of the 
facts to make that determination now. 

MR. GHAPPOUR: Your Honor, if I may, if this is 
relevant to your decision how we proceed, Ms. Norton 
actually wrote I believe a cover story for Wired Magazine 
which is the biggest technology magazine on this hacking 
using and if you were to read the article, you would — 
with the journalist test lens for ethics, she would have 
to verify various points. The only way you can do that 
and what will come out in the testimony is the only way 
you can do that is through viewing or receiving the 
information, et cetera. 

In addition, Ms. Norton is a security expert. She 
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has been — she has provided training for our government 

on — 

MR. SWIFT: But Your Honor -- 

THE COURT: Stop. The court reporter cannot get 
everything down if both of you are talking. When you do 
that, Mr. Swift, Ms. Crawford cannot get it down. I want 
to make certain that we have a complete record. 
Ms. Ghappour, you were talking. 

MR. GHAPPOUR: I am sorry. Your Honor. 
Ms. Norton is also a security expert and security expert 
of information and operational security expert. She has 
been — she has provided training to our government in 
that regard, and what we expect her — what her testimony 
will also state is that for security experts that it is 
essential to find out who is the hacking target zone and 
do the exact same stuff that journalists need to do, and 
I think Your Honor needs to hear that because they can't 
be guilty of that . 

MR. SWIFT: I am going to ask the questions, and 
if the government wants to cross-examine and take the 
leading journalist for Wired down, the government can do 
that . 

THE COURT: I think what the government is 
saying, Mr. Swift, is that, and I am not saying this is 
going to happen that Ms. — 
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MR. SWIFT: -- withdrawing the witness. 

THE COURT: Okay, now. I have been extremely 
patient. You have been defiant, and frankly, at times I 
think you have been disrespectful. I have let it go. I 
am easy to get along with, but I do not like people to 
disrespect me . 

MR. SWIFT: Sorry, Judge. 

THE COURT: Tell me this. Did you hear me ask 
you to withdraw the witness? 

MR. SWIFT: No, Your Honor, I didn't. 

THE COURT: All right. You can proceed with 
her. If something comes of it, if she gets in trouble by 
the questions, that is between you and her because I do 
not know what is going on. I do think based upon the way 
she answers the questions, she feels confident about her 
answers, but I just can't say at this time that she is 
going to say something that might incriminate her or 
cause her to be subject to prosecution. 

I also stated that the Court has to be awfully 
careful because the Court does not want to stifle 
testimony or chill testimony because if I get up and make 
a statement about this, she could very well clam up and 
say I am not going to testify because of a statement that 
the Court makes. So I am going to allow you to continue 
to move forward. I would like the questions to move 
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forward . 

MR. SWIFT: Thank you. Your Honor, and I 
apologi ze . 

MS. HEATH: We felt obligated to bring that up 
because she is admitting to criminal conduct, and it 
concerns the government. 

MR. GHAPPOUR: Your Honor, I am very sorry. Can 
I ask a question just in the context of this discussion? 
Is it — what I understand that — what I understand 
Ms. Heath's assertion just now is that Ms. Norton has 
admitted to criminal conduct by stating that she received 
documents that were already in the public domain; is that 
correct? Just my understanding. 

MS. HEATH: Yes, she took into her possession 
stolen credit card information. 

MR. GHAPPOUR: And I am sorry. Your Honor. I 
feel like I have got in my possession stolen materials 
because I am reading article like this on the net. I 
don't know where to draw the line here in terms of an 
ethical line because you are right. It is a very 
important question. 

THE COURT: Well, the issue has been raised and 
as I stated before, I do not feel that I have enough 
information at this time to justify a warning to 
Ms. Quinn, and I am going to allow the questions to 

Charyse C. Crawford, CSR, RPR 
1100 Commerce, Room 1544, Dallas, Texas 75242 
(214)753-2373 Telephone 
Charyse_Crawford@txnd.uscourts.gov or charysecrawford@gmail.com 



1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 



193 



proceed at this time, and if something develops more, 
specifically, Ms. Heath, that you think it is even 
closer, then we can revisit the issue. 

MS. HEATH: Yes, Your Honor. 

MR. SWIFT: Thank you. 
(THE FOLLOWING PROCEEDINGS WERE HAD IN OPEN COURT, 
WITH ALL PARTIES AND COUNSEL PRESENT.) 

Q. (BY MR. SWIFT) So, did you also receive the documents 
that they downloaded? 

A. They offered them to me, but I didn't actually have a 
way of taking them. It was many — it was a really big 
drop, but they offered them to me on the 24th, and I had 
to refuse . 

Q. And were you present on the IRC channels on the 23rd 
and 24th when Mr. Brown was discussing these things? 
A. I wasn't present in Project PM at the time, no. 
Q. Was Mr. Brown on the operational channels for the 
Strategic Forces? 

A. The operational channels were not public. I was not 
in them. I was in a separate channel they had made for 
me and Ms. Coleman, and I was also on the public 
channels, but the operational channels were kept secret. 
I don't believe that Mr. Brown was in them. 

MS. HEATH: Your Honor, we would object to 
speculation if she was not there. 
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THE WITNESS: Can I clarify that then? I was 

asked — 

MS. HEATH: Your Honor, I object. 

THE COURT: Wait just a minute. Do you know one 
way or the other? 

THE WITNESS: Yes. 

THE COURT: Do you still maintain the objection, 
Ms. Heath? 

MS. HEATH: Yes, Your Honor. 

THE COURT: Let's do this. Let's start a fresh. 
Let's reask the question and if the proper predicate is 
not laid or calls for speculation or conjecture, 
Ms. Heath, you may renew your objection. 

MS. HEATH: Thank you. Your Honor. 
Q. (BY MR. SWIFT) Why did you -- you just testified — 
or you were indicating that you were on a special 
channel ? 
A . Yes . 

Q. There was an operational channel? 
A. It was a media channel. 
Q. Media? 

A. Specifically for talking to me and Ms. Coleman. 
Q. Okay. Was there — there would have been an 
operational channel for conducting the operation? 
A . Yes . 
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Q. And then there were general channels wherein it was 

discussed? 

A . Yes . 

Q. You stated that Mr. Brown was not in the special 
channel s ? 

A. I asked the AntiSec participants in that whether or 
not Mr. Brown was involved, and they indicated 
emphatically that he was not. 

MS. HEATH: Your Honor, we would object whether 
he is involved doesn't mean he is not on the channel. 
She is indicating he was not in the channel. This does 
not indicate that he wasn't on the channel. 

MR. SWIFT: Your Honor, -- I would have her 
testimony — I will ask expanded questions if we want . 

THE COURT: All right, let's try one more time. 
I will sustain the objection. 

Q. (BY MR. SWIFT) You — now, you talked to the 
participants about Mr. Brown's participation? 
A . Yes . 

Q. And they stated what? 

A. And they stated that he was in no way involved. 
Q. What would that mean? 

A. And this would mean that he wasn't involved in any 
place where he could have recorded their conversations 
about how they were doing the hack. 

Charyse C. Crawford, CSR, RPR 
1100 Commerce, Room 1544, Dallas, Texas 75242 
(214)753-2373 Telephone 
Charyse_Crawford@txnd.uscourts.gov or charysecrawford@gmail.com 



1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 



196 



Q. And if he were in the operational channels, could he 
do that? 

A. Yes, he was known to log, and that was a 
controversial point with the AntiSec participants. 
Q. Let's talk briefly about the impacts. In the 
security field and in the journalism field, does the 
issue of compromised credit cards or credit cards on the 
internet come up a lot? 
A . Yes . 
Q. How often? 

A. For security professionals on a nearly daily basis. 
Q. Where do they find them? 

A. Many of them are posted to places like Pastebin, 
black market websites, some which have public 
repositors. They are often posted in public and often on 
repositors that are discovered during the reversing of 
malware . 

Q. So you get -- you come into possession as a security 
professional on these — all the time? 

A. And as a media person who covers that field, you also 
come into possession, but not as often. 

Q. Had you come into possession on previous occasions? 
A . Yes . 

Q. Now, do you conduct training for the United States? 
A. I have consulted. 
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Q. Who have you consulted with? 

A. I have consulted with the Office of Director of 
National Intelligence. 

MS. HEATH: Again, we would object to the 
relevance . 

MR. SWIFT: It's going to the credit cards and 
what they are used for. Your Honor. 

MS. HEATH: This is getting far field. Your 
Honor; relevance. 

THE COURT: It does seem to get far field unless 
you are connecting it. Maybe you need to ask more 
questions and connect it and show the relevance. 

MR. SWIFT: Yes, Your Honor. 
Q. (BY MR. SWIFT) In that capacity, do you utilize 
screen shots or other parts of stolen credit cards to 
train people? 
A. I do. 

Q. Is that common in the profession? 
A . Yes . 

Q. The — was there — Mr. Brown was described as the 

strategist for Anonymous. Does Anonymous have a 

strategist based on your — 

A . No . 

Q. Why not? 

A. Anonymous doesn't have formalized roles quite like 
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that. It is a duocracy. People participate by doing 
things, and this is either accepted or rejected by a 
plurality of people that are close. It is very much the 
opposite of this world. It is nonhierarchical . It is 
confusing, and anyone who tries to create a persistent 
role attracts animosity from the group. 
Q. Next question. He described himself as a 
propagandist. Is that accurate? 

A. That would have to be for his own purposes. That 
wouldn't be a formalized role anywhere. There is a lot 
of propaganda in Anonymous and many people participated 
in the proces s . 

Q. He described himself as a troll. What is a troll? 
A. Trolling is a really key point to this culture. 
Trolling is the process of kind a long extended joke 
often in the form of a schadenfreude which is about lying 
and creating — sometimes lying, sometimes 

decontextualizing things and creating situations in which 

people are going to respond usually frustrated or angry 

ways to the movement of a watching crowd. 

Q. Was trolling the media a particular virtue of 

Anonymous ? 

A . Oh, yes . 

Q. How do you mean by that? 
A. It was considered — 
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MS. HEATH: Your Honor, we object again; 
relevance . 

MR. SWIFT: Many of the — 

THE COURT: Wait just a minute, Mr. Swift. All 
right, your objection is relevance. What is your 
argument, Ms. Heath? 

MS. HEATH: That trolling whether members of 
Anonymous trolled the media doesn't get back to what 
Mr. Brown's relevant conduct is with regard to the 
intrusions and exfiltration of the stolen data. 

MR. SWIFT: The government — may I speak. Your 

Honor ? 

THE COURT: You may. 

MR. SWIFT: Government's Exhibit No. 1 through 35 
universally talk about trolls as strategists speaking to 
the media, speaking to the media on interest, etc. I am 
trying to put that in context. Trolling the media and 
claiming powers that you have is completely in context 
with the Anonymous culture, and so it is relevant to the 
Court's understanding of those documents. She is called 
primarily as a rebuttal witness to evidence that the 
government has put before this Court. 

The Court said it is looking through it, but I don't 
have rulings as to what the Court will consider, so I am 
putting on evidence as to the value of any one of those 
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statements. This is a counterculture where we cannot 
take somebody's statement at face value, and the idea 
that he is strategist or running something is completely 
acceptable within the culture. Her testimony will be 
that it is particularly acceptable to do to the media. 

THE COURT: All right, I will allow it at this 
point, but let's go ahead and wind this up. 

MR. SWIFT: Yes, Your Honor. 

THE COURT: Really, I think we have gotten far 
field. I think, frankly speaking, both sides have 
included documentary evidence and testimony that is 
really of minimal value, if any at all to the Court in 
deciding the issue that it needs to decide. Once again, 
it seems like one side is just really trying to get a leg 
up on the other side. Let's go ahead on. 

Q. (BY MR. SWIFT) What -- describe briefly trolling with 
relationship to the media? 

A. There is an on going culture of trying to get lies 
printed by major media. There is even whole Ops devoted 
to trying to troll the media into exaggerated claims on 
Ops Facebook. That was something that was done 
repeatedly to convince the media that Anonymous was going 
to take down Facebook. There was even an Ops Global 
Blackout where they were going to shut down the internet 
on March 31st. Amazingly, midnight on March 31st is 
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April's Fool's Day, so that is common cultural game that 
is played and going to the media trumping up their 
credentials talking about all the things that you can do, 
all the governments you can take down. This is a really 
standard practice, and it was a challenge in my work in 
that I couldn't just say I know you are lying because I 
would lose my contacts that way, so I was always 
determined I could only print what I could prove. 
Q. Last part, what is doxing? 

A. Doxing is the revealing of information seen as 
damaging or revealing about the target. 

Q. What does that — what is that — where does that 
information come from? 

A. The majority of doxing is based on publicly available 
information. There are whole services that kind of 
search out people's services commercially offered that 
doxers use to build essentially on dossiers that get also 
supplemented in a more political sense by certain groups 
of Anonymous by going through less accessible public 
record and building again a dossier to release on a group 
or individual. Some doxing uses on illegally-obtained 
information. Some of that is illegally obtained by the 
people doing the doxing, but in most cases is a clever 
use of public information. 

MR. SWIFT: No further questions. 
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THE COURT: All right thank you, Mr. Swift. 
Cross-examination, Ms. Heath. 

MS. HEATH: Yes, Your Honor. 

CROSS EXAMINATION 

Q. (BY MS. HEATH) Ms. Norton, I believe we met this 
morning. Now, you are a journalist? 
A . Yes . 

Q. And as a journalist in covering Anonymous, you did 
not want to meet any of the individuals during the period 
of time that they were involved in this activity; is that 
correct ? 

A. I said that I would not use anyone as a source if I 
knew them, knew their real identity. 

Q. Didn't you indicate it was your position not to meet 
with them during the period of time that they were 
involved in this activity? 

A. If I was in a situation where I met with them in 
person for instance at an occupy camp and that was my 
initial meeting, I would just distance myself from any 
identifying information, but it was impractical. I would 
never meet someone that I knew online deliberately if I 
initially met them at say a protest camp or protest, I 
couldn't avoid physically meeting them. 

Q. You purposely wouldn't go and try to meet somebody 
from Anonymous? 
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A. Right; I would not. 

Q. And as a journalist, you have to have sort of 
objective preparation of what you are covering? 
A. I am specifically in the new school, the new 
journalism, so it is a — it is a subjective point of 
view journalism. 

Q. What I mean is you are not going to go create the 
activity and then report on your own activity? 
A. Not usually. 

Q. You are reporting on other people's activity? 
A. Uh-huh. 

THE COURT: Okay, explain to me one thing. You 
said "new journalism." What does that encompass? 

THE WITNESS: So new journalism it was kind of 
as it was called by Tom Wolf, and it is a subjective 
point of view journalism where you are involved in what 
is going on. It is kind of a culturally-embedded 
journalism, so your journalism experience is part of the 
story . 

THE COURT: So would it necessarily be fair, 
what you would say? 

THE WITNESS: I think I actually critiqued the 
objectivity, so I would say it is more fair than 
objective which does not impose the biases of the human 
being during the process. 
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THE COURT: You said subjective, but to me that 
is what — that is from one point of person's point of 
view. What is the difference between subjective 
journalism and objective journalism? 

THE WITNESS: From my point of view, and again, 
this a debate in the field. Subjective journalism 
exposes the biases, and objective journalism attempts to 
hide or deny biases that are still there. 

THE COURT: That is a bit oxymoronic, but anyway, 

move on . 

Q. (BY MS. HEATH) That would include the biases of the 
journalist? 

A. One of the points is to try and expose your own 
biases . 

Q. Now, as you were covering Anonymous, you never made 
any claims that you were the spokesperson? 
A . No . 

Q. You never made any claims that you were a strategist? 
A. No . 

Q. You didn't make any claims that you are an advisor? 
A . No . 

Q. A theorist? 
A . No . 

Q. A director of any activities? 
A. No . 
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Q. You didn't recruit for Anonymous? 

A. No. I may have accidentally recruited for Anonymous 
as I think people enjoy my articles. 

Q. You didn't purposely go out and encourage people to 

join? 

A. No . 

Q. You were not a organizer of any legal teams for 
Anonymous ? 



A. 


No . 






Q. 


You 


are 


not an operative? 


A. 


No . 






Q. 


You 


are 


not an activist in the sense of participating 


in 


the a 




/ities of Anonymous? 


A. 


No . 






Q. 


And 


you 


didn't help identify targets for Anonymous? 


A. 


No . 






Q. 


Now , 


as 


a person who would be a propagandist for 



Anonymous or even the trolls for Anonymous is part of the 
role is to manipulate individuals especially the media? 
A . Yes . 

Q. So part of what Anonymous sets out to do is try to 
manipulate journalists such as yourself? 
A . Yes . 

Q. In this case when you are covering Anonymous, you are 
not in any of the operation rooms or chat rooms? 
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A. Given the roles, the rooms can change, I can suddenly 
find myself in one. Usually, I would ask to be kicked at 
that point . 

Q. Back in 2011, stay with that year, 2011, you were not 
finding yourself in the operation rooms? 

A. I found myself in some rooms that had switched to 
being operational. I made a standing request if they did 
that, they should kick me. Sometimes that worked, 
sometimes it didn't, but if I suddenly discovered that 
they talked about stuff I didn't want to know, I would 
leave the room. 

Q. You said kick out the room. That is temporary. That 
is not a block from the room, just kicked out 
temporarily. Can you go back on? 

A. Kicks can go both ways. I was never kicked — banned 
kicked . 

Q. You did indicate that you did not participate in any 
of the private conversations, private channels? 
A. I participated in ones that were set up specifically 
for me . 

Q. But not with regard to the Anonymous activities and 
their st rategizing, targeting, or working the operations? 
A . No . 

Q. Now, in this particular case, you are testifying 
here, you have not reviewed all of the e-mails that were 
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taken from Mr. Brown's computer? 
A. No, I have not. 

Q. You have not reviewed all the chats taken from his 

computer? 

A . No . 

Q. So you are not familiar with what Mr. Brown did or 
said on a daily basis with the involvement with Anonymous 
AntiSec, LulzSec, or any of the other organizations like 
Project PM? 

A. I am familiar with the other side of that time for 
the period of time when I was working those stories 
because I was on pretty continuously with the same people 
that were conducting those operations . 

Q. You were given what information Anonymous wanted to 
give you? 

A. Yes, and I make them contextualize it before I am 
willing to print it . 

Q. You found in many cases that the Anonymous 
individuals or the participants in Anonymous, they may 
have public facing persona that were different from their 
private personas that they would share with one another? 
A. I would say that is fairly rare. They were fairly 
consistent . 

Q. But you were not in the private chats to see these 
personas ? 
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A. I was in some, not necessarily the ones where they 
were doing active illegal hacks. 

Q. Let me put it this way. A chat between two Anonymous 
members and only two Anonymous members, you would not be 
in that chat? 

A. I think the definition of that would be true. 

Q. In those private chats, you would not know what type 

of persona they were presenting to each other? 

A. That is true, but it also tautological. 

Q. I'm sorry. What? 

A. Tautological of any human interaction. 
Q. You were talking about hacks and that there are 
different layers of a hack. The hack is a general term 
that includes not only the initial intrusion into 
whatever system they were accessing, but includes 
exploiting the vulnerability after they get in, where 
else they go in the system, what other vulnerabilities 
they can exploit, exfiltration of the data that is part 
of the hack when they record it; isn't that correct? 
A. It depends on who is doing the reporting, those 
parameters change. It's usually exfiltration, changes, 
things like that, and initially and subsequently involves 
what would be included in most definitions of hack. 
Q. So when we are generally using the term hack, it can 
include the exfiltration of data such as when the hackers 
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offered you the credit cards which you refused? 
A. Actually, exfiltration has a very specific meaning 
there, which is figuring out how to move the data from 
inside of a network server to an external network server. 
Q. I understand, but I am talking the exfiltration can 
be part of the general term hack that you just described; 
isn't that correct? 

A. Handing it to me would be the act of exfiltration. 
Q. Exfiltration — then that is the dissemination of the 
stolen data at that point? 
A. Yeah. 

Q. But all that can be included what I am trying to say 
in the general term hack that is used by a lay person 
used by some members of the media? 

A. Honestly I would say this is unsettled on whether or 
not distribution — whether or not handing something to 
WikiLeaks is hacking that would probably not be normally 
how most media professionals who are technically 
knowledgeable would put that . 

Q. The reports that are of interest to the public would 
be that an entity is hacked and "X" is taken from the 
entity. It doesn't interest the public if they just say, 
hey, somebody got into our system, but they didn't get 
anything? 

A. I dearly hope my reports are expressing to the 
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public, but I would separate out the process of hacking 
with for instance I wrote a story about what Stratfor did 
or what was done with Stratfor, and then I wrote a 
subsequent story about that being transferred to 
WikiLeaks some weeks later. Those are two separate 
events, and the second one isn't a hack. 
Q. I understand there is different terms, intrusion, 
dissemination. I understand there are different terms 
that people can use. All I am trying to ask you is that 
in your experience have not media members and/or just the 
lay public when they refer to a hack, they are referring 
to the whole activity? 

A. I would say not in that Stratfor case, no. 
Q. No, in general terms, I am saying. 
A. There's no general terms, so this is terribly 
unsettled things and things get described all sorts of 
ways at the point when you say something was handed over 
to a secure drop or WikiLeaks or something like that I 
don't actually see that as described as a hack by many 
people in journalism. 

Q. None of that could have occurred without the initial 
intrusion? 

A. In the case something that was coming from an 
intrusion, yes. 

Q. Now, the general purpose from your experience when an 
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intrusion was planned by Anonymous, the intrusion was not 
to get in the system, but get data from the system? 
A . Yes . 

Q. And data could include e-mails? 

A. I am sorry. Let me correct myself. In some cases 
the goal was to get data and some cases the goal was to 
deface the server and they were interested in the data. 
Q. And data includes e-mails? 
A . Yes . 

Q. And data includes documents? 
A. It can include anything. 

Q. Data can include accounts from their customers which 
would include potentially credit card information? 
A . Yes . 

Q. Now, you made the statement about security 
professionals who are investigating hacks. They received 
on occasion the stolen data? 
A . Yes . 

Q. And actually they are investigating the actual 
intrusion trying to determine how it happened, trying to 
determine how the data was exfiltrated after that? 
A. Also the source of the data. 

Q. And the source of the data, isn't it often that the 
security professional that's investigating that, the 
security professional for the particular entities that 
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has been hacked? 
A. Rarely. 

Q. Isn't it often that the credit card companies when 
like a retail hack occurs and credit cards are stolen 
that the credit cards security professionals are the ones 
doing the investigation? 

A. That would be the exception to the rule not the rule. 

Q. Would you disagree that pretty much most of the law 

enforcement receives their information from security 

professionals who are investigating the hacks? 

A. So — yes, but the security professionals are not 

usually from the origin of the company or entity from 

where it was hacked. That is an exception to the rule, 

not the rule . 

Q. In your opinion? 

A. I mean a lot of it is certs, so a huge amount is the 
cert network, these groups that exist, a multiplicity 
around the country, and companies all around the world, 
and they detect the malware and chasing it down and then 
contacting the company afterwards. 

Q. You were talking about how there is no defined roles 
in Anonymous and Anonymous is a culture. Would you agree 
that part of the culture of Anonymous is that a person 
can choose their own role? 
A. Choose but probably not keep. 
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Q. They can choose how they want to proceed in 
Anonymous ? 
A . Yes . 

Q. And they can continue to proceed in that fashion? 

A. Within a social milieu which is a very heavy level of 

pressure . 

Q. And the roles that people choose and are able to 
continue to pursue may include what they have skills in? 
A . Yes . 

Q. So your people that are able to make or find 
vulnerabilities will be ones that find the 
vulnerabilities ? 
A . Yes . 

Q. And the people that are actually exploiting the 
vulnerabilities may be the ones that find the 
vulnerabilities ? 

A. Usually they are the same people, but yeah. 

Q. You see where I am going? People have skills that 

they bring to Anonymous? 

A . Yes . 

Q. And then the culture can — 

A. Although, the culture has a strong mentorship 
capacity, so people often switch roles based upon 
mentorship relationships within Anonymous. You bring one 
set of skills and learn another inside. It is a 
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sociological participatory culture. 

Q. A person who may not know how to hack may learn to 
hack from other people? 

A. And a person who knows how to hack may learn video 
editing from someone else. 

Q. Now, with regard to the chats that Mr. Brown was 
involved in whether it be a private chat and obvious a 
private chat with somebody else you are not involved; is 
that correct? 
A . Yes . 

Q. The group IRC chats, you did not necessarily find 

yourself in a chat with Barrett Brown on a daily basis? 

A. I would say it was close to daily. 

Q. And you were going by just Quinn in the chats? 

A. Quinn, yeah. 

MS. HEATH: Your Honor, if I may have a moment? 

THE COURT: You may. 

(PAUSE IN PROCEEDINGS.) 
Q. (BY MS. HEATH) How many times have you met Barrett 
Brown ? 

A. This is my second time. 

Q. And the first time was in New York? 

A. No, it was in Boston. 

Q. In Boston? 

A. Uh-huh. 
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Q. So you did not meet with him in New York at Greg 
Housch's house? 

A. Greg Housch's house is in Boston. 
Q. In Boston? 
A . Yes . 

Q. That is where you met with him? 
A. Yeah. 

Q. I believe that was in November 23rd of 2011? 

A. I don't recall the date. 

Q. But November of 2011? 

A. I don't recall the date. 

Q. Right around Thanksgiving? 

A . I am not sur e . 

Q. Of 2011. 

THE COURT: Do you remember the year? 

THE WITNESS: 2011. 
Q. (BY MS. HEATH) Prior to the Stratfor hack? 
A . Yes . 

Q. Now, you have written a number of articles and you 
talked at length about how Anonymous picks targets, 
launches attacks, and takes powerful organizations down. 
In that, you talk about how 2011 was a very active year 
for Anonymous? 
A . Yes . 

Q. And AntiSec and LulzSec? 
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A. Yeah. 

Q. And how they were very active in attacking 
organizations and taking them down? 
A . Yes . 

Q. You are not here to tell the Court that these actions 
we talked about with HBGary or Stratfor or combined 
systems that they did not occur? 

A. Of course, they occurred. Combined Systems in 2011. 
I think it was 2012. 

Q. 2012? But in 2011, they were very active? 
A . Yes . 

Q. And while the majority of the people that are 
involved in Anonymous are not hackers, there there are a 
number of hackers; correct? 
A . Yes . 

Q. So when someone says I am not a hacker, that's not an 
unusual thing. There's a number purposes for them to be 
in Anonymous and not be a hacker? 
A. That's correct. 

Q. And were you aware that December 25th and that was 
2011, and that was the day you said you were going to — 
A. Publish. 

Q. Publish the information about the Stratfor hack? 
A. Yeah. 

Q. On that very same day that Barrett Brown was in Anon 
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Ops, in that chat room? 

A. That was a general chat room that many of us were in, 
yeah . 

Q. And right when he joined that chat room, a link was 
posted by somebody by the name of Free M-All and that was 
the 5,550 credit cards whatever it was for the B and C 
credit cards? 
A. Sample credit cards. 

Q. That is right when Barrett Brown joined the room? 
A. I don't remember the chat logs exactly, but that 
sounds plausible. 

Q. And then the notice from the person who posted, they 
made a little arrow pointing to the link and said five 
thousand cards? 

A. So it was really, really hectic time and Anon Ops is 
a huge channel, much bigger than any other channel on 
that server, and it was — it was literally scrolling 
like this. It was really hard to tell what what was 
going on. 

Q. But you are not specifically remembering that? 
A. No. It was a very chaotic day. 

Q. Now, you have had some bad experiences with the 
government in the past? 
A . I have . 

Q. In fact, you were called or subpoenaed to testify in 
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the grand jury, when was that back in 2011? 
A. Yes, March of 2011. 

Q. And the government at that time gave you a proffer 
agreement ? 

A. Not at that time, a few weeks later. 

Q. And so you were not prosecuted for any involvement 
whatsoever with regard to what they were investigating at 
that time? 
A . No , I wa s not . 

Q. And that caused you a lot of problems, caused you a 

lot of issues; is that correct? 

A. It certainly made work very difficult. 

Q. During that period of time, you said you were unable 
to cover some of the things that were happening with 
Anonymous ? 
A . Yes . 

Q. In fact, you said you did not even know about or did 
not follow when AntiSec went down and LulzSec began? 
A. Other way around. 

Q. LulzSec went down, then AntiSec? 

A. AntiSec was around the time I was able to get back in 
the game . 

Q. So there was a period of time you were missing with 

LulzSec? 

A . Yes . 
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Q. In fact, you wrote an open letter to the prosecutor 

in the case complaining about basically how you had been 
treated? 

A. I was actually complaining about the judgment of 
taking that case. 

Q. With regard to Barrett Brown's case — 

THE COURT: You said the judgment of taking that 
case or the judge that was taking that case? 

THE WITNESS: Judgment -- I never got to a 

judge . 

THE COURT: The judgment of taking the case; 

okay . 

Q. (BY MS. HEATH) Do you have a Twitter account? 
A . I do . 

Q. On your Twitter account, did you post something about 
your opinion on Barrett Brown on this case? 

A. I — I — probably. I have got over 40,000 tweets on 
there. I don't remember all of them perfectly to tell 
you . 

Q. And I don't have all of them in front of me. I only 
have the one, and I know in April of 2013, you posted 
seriously, journalists, it's time to freak out about 
Barrett Brown. The process on the way to destroying 
online publishing rights? 
A. That is absolutely correct. 
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Q. So that is what you posted about this? 
A . Yes . 

Q. One of the things you posted? 

A. The concept that you could be held responsible for a 
link is incredibly chilling to what I do. 

Q. And there was discussion about what sentence Barrett 
Brown would get and you reminded by other people that he 
also threatened federal law enforcement officers? 
A. I never particularly considered that relevant to my 
concerns about this case. That is not something I 
consider journalism, but being able to analyze 
information from sources is absolutely vital to 
definition of journalism, and absolutely vital to what 
the 21st Century definition of journalism will be. 
Q. Would you agree with the fact that if somebody 
commits a crime that if it is proven that they committed 
a crime that they should be found guilty of the crime and 
punished for the crime? 
A . Sur e . 

Q. If somebody pleads guilty to the crime they have 
admitted to committing the crime? 

A. I feel at that point it is none of my business. That 
is between them and the Court. 

THE COURT: I don't think that is really 
responsive to the question though. 
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THE WITNESS: I may not have understood the 

que St i on . 

THE COURT: I think the question is a yes or no, 
and you said something like it wasn't any of your 
business. I don't think it is nonresponsive . 

THE WITNESS: Okay. Okay, restate the 
question. I am sorry. 

THE COURT: Ms. Crawford, could you reread the 

question . 

Q. (BY MS. HEATH) I didn't have -- 

THE COURT: I asked Ms. Crawford to reread. 

(THE REPORTER READ BACK THE LAST QUESTION.) 

THE WITNESS: Yes. 
Q. (BY MS. HEATH) Once they have admitted to committing 
the crime, then they should be sentence for the criminal 
act ivity ? 
A . Yes . 

MR. SWIFT: Objection; relevance. She is not -- 
she has not been called to comment on what sentence 
should be received. What does this have to do with 
anything? 

THE COURT: Well — 

MR. SWIFT: We are questioning a witness whether 
she thinks an individual should be punished. 

THE COURT: You know, I understand that. That is 
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within the purview of the Court . The Court is going to 
make that decision. That is left to the discretion of 
the Court based upon the evidence, and the Court will 
make that decision, and I do think probably the question 
is irrelevant, but you have asked some too, Mr. Swift, to 
be quite honest with you. 

MR. SWIFT: Yes, Your Honor. 

THE COURT: I have taken the approach let them go 
ahead and get finished. I know what I am going to do and 
look at the evidence, and we will let the Fifth Circuit 
will decide. The Fifth Circuit will decide if I am 
wrong. That is within the purview of the Court and, 
frankly speaking, the Court will probably ignore most of 
this line of questioning. 

MS. HEATH: Your Honor, we will pass the witness 
at this time . 

THE COURT: All right. Thank you, Ms. Heath. 
Redirect, Mr. Swift. 

MR. SWIFT: Very briefly really one area that I 
want go on . 

REDIRECT EXAMINATION 
Q. (BY MR. SWIFT) You talked about how in the IRC 
channels on the day that the credit card information and 
all that came down, you described it as streaming. Can 
you explain further? 
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A. So as each person puts their input into a channel, it 
scrolls up your screen and if this is two people talking 
it scrolls at a reasonable rate. If it is channel with 
50 or 150 or 200 people and they are all trying to talk 
at once, it is bit like the screens in hacker movies that 
are normally not realistic. You can't read it. In those 
cases many people capture that and read it later, but it 
can be a very chaotic situation and there are people 
making jokes and people making serious statements and 
this was a channel with if I recall like 100 people in it 
or more, so there is a lot of activity at the time. 
Q. So Mr. Brown when he gives answers on that like thank 
you so much. This will change our course to credit 
cards, could be he is not reading things as it is going 
by so fast? 

A. I don't know which channel that was on. 

THE COURT: That would call for speculation. 
MR. SWIFT: Yes, Your Honor. 

THE COURT: Unless the proper predicate is laid, 
move to the next question. 

Q. (BY MR. SWIFT) Was it common to have three or four 

different channels open? 

A. Oh, so it's universal just about. 

Q. So you could have? 

A . Yes . 
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Q. Multiple screens open? 

A. You did. That was standard. 

Q. Last question. Inside Anonymous was Barrett Brown a 
high status individual? 

A. Barrett Brown was a highly known individual, but 
status is usually based on technical skills, so while his 
ability to talk to the media is respected by some people 
and recently by others, he was never able to achieve that 
kind of pinnacle of status that you get with being able 
to do technical things. 

MR. SWIFT: No further questions. 

THE COURT: All right. Ms. Heath, any recross? 
MS. HEATH: Your Honor, just actually one 

question . 

THE COURT: All right. 

RECROSS EXAMINATION 

Q. (BY MS. HEATH) You are talking about the chats. If 

you are logging the chats, they are going to be there; is 
that correct? 

A. Yes, although many, many, many pages, almost 
impossible to review all of that. 
Q. Is the answer yes? 
A . Yes . 

MS. HEATH: No further questions. 

THE COURT: All right, anything further of this 
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wit ne s s ? 

MR. SWIFT: No, Your Honor. 

THE COURT: All right, ma'am, you may step down. 

THE WITNESS: Thank you. 
(WITNESS EXCUSED.) 

THE COURT: Does that conclude the testimony in 
this sentencing hearing? 

MS. HEATH: Your Honor, we would reserve the 
right to offer the full chat where Mr. Brown first knew 
about the credit cards, so the Court can have that. I 
tried to print it out upstairs. It cut off my paper. I 
need to go reprint it. I would like to offer the full 
chat for this Court, and I owe the Court the spreadsheet 
for the credit card information. 

THE COURT: All right, I am going to do this 
then. Before I make my statement, Ms. Cadeddu, you 
sprang up there. 

MS. CADEDDU: I am sorry. The government -- 
again, we are making statements that Mr. Brown knew and 
part of the line of questioning with her was argument 
about why he didn't know. I would like to have a chance 
to be able to see — the Court said you don't want to 
receive any more briefing or anything else, but my 
concern is I don't want this to be admitted and not have 
the opportunity to explain it . 
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THE COURT: All right, let's do this then. I 
will allow you to do that. If the defense has an 
objection, the objection needs to be made by a week from 
today. Any reply within five days after that and — let 
me say this. How long will it take you to get that 
information to Ms. Cadeddu? 

MS. HEATH: The chat is I think 45 pages. It is 
just a matter of my going that I format the printer and 
not cut off the end of the line. The spread sheet, I 
think we can get that fairly quickly maybe in the next 
twenty minutes. 

THE COURT: All right, let me do this. You said 
the chat is 45 pages long, and there is a spreadsheet 
that we talked about concerning the credit cards, the 
identifiable victims; is that correct? 

MS. HEATH: Yes, Your Honor. 

THE COURT: All right, is there any reason why 
that cannot be delivered to the defense by noon tomorrow 
morning? 

MS. HEATH: None at all. Your Honor. 

THE COURT: Tomorrow is Wednesday, if there is 
any objection, Ms. Cadeddu, the defense needs to respond 
by the close of business Friday, and if the government 
wants to reply, then it must do so by noon — let's say 
close of business on Monday. 
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All right, so what we are going to do is those 
documents, the 45-page chat and the spreadsheet 
concerning the identifiable victims must be presented by 
to the defense by noon tomorrow. Any response or 
objection to those documents or commentary shall be filed 
by the defense by the close of business on Friday, and 
any reply by the government must be by five o'clock on 
Monday . 

I have seen enough documents in this case. The 
response may not exceed seven pages, and any reply must 
not exceed five pages. 

MS. CADEDDU: Your Honor, may I ask a clarifying 
question? We are limited in our response, of course, and 
I understand and agree to responding to just these two 
documents. The government will present and we will limit 
our response to the seven pages, and the government will 
limit it to I think you said five pages. I want to make 
sure we are able if explanatory or additional checks that 
we are able to append those, those that we believe that 
will put them into context. We will be reasonable. I 
give you my word. 

THE COURT: All right, I am not laughing at you, 
Ms. Cadeddu. That is a term that both sides use. I 
think that term has sort of lost its meaning. That is a 
matter of perception. Here is my concern. Counsel for 
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both sides, at some time sooner or later the jig is up. 
We have got to stop receiving evidence. It is time for 
the Court to have everything, review that evidence, and 
make a decision. Bottom line is when this month ends or 
prior — prior before this month ends, I want to see all 
the documentary evidence there is, and when we come back 
on the 22nd of January, if there is any statements to be 
made in conjunction with the sentencing the Court will 
make its ruling. 

The only argument that will be made from the parties 
will be that invited by the Court. All I am saying is it 
is time to get all this documentary evidence out of the 
way, and it is time to move forward. 

MS. CADEDDU: Your Honor, may I? 
THE COURT: Sure. 

MS. CADEDDU: We have one more issue that we have 
not presented any argument on, and that is relating to 
one of our objections and I wasn't sure. We have argued 
certainly . 

THE COURT: You are talking about the grouping. 

MS. CADEDDU: The grouping, yes, sir. 

THE COURT: I think that I don't know what other 
additional evidence is needed on that. 

MS. CADEDDU: No evidence, but we have not had 
argument on the grouping. 
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THE COURT: Let me ask this. This is one where 
I may reverse myself. Let's do it like this. You have 
already made — you have not made any arguments, but as 
to grouping, the government has the burden to show that 
it applies . 

Okay, Ms. Heath, I will allow you no more than five 
pages on the grouping argument, and a response, and I 
don't want anything after that unless I invite it. You 
have already had one shot at it with the material prior 
to the sentencing hearing, so if the parties want to 
address the grouping issue, I will allow each side five 
page s . 

I am not going to allow a reply unless I think it is 
necessary. So what I am telling both sides, you need to 
anticipate the argument that the other side is going to 
make and address it. I think you pretty much know what 
the other side's position is, and please, if you find it, 
use Fifth Circuit or Supreme Court authority. 

A long time ago when I was a young attorney, I 
remember going before Judge Porter, and I couldn't find 
any authority. No offense to you, Mr. Swift, but all I 
could find was a district court case out of Washington. 
I cited it to Judge Porter, and Judge Porter looked at me 
and said, "Lindsay, is that a district court case?" I 
said, "yes, sir, it is. It is the only authority I could 
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find . " 

He looked at me and smiled and said, "Well, they 
don't pay attention to me, and I don't pay any attention 
to them." So what I am saying is give me Fifth Circuit 
authority or give me Supreme Court authority or give me 
something that is binding on the court. The only 
exception would be if there is nothing on point within 
the Fifth Circuit or the Supreme Court. 

Any other questions? 

MS. CADEDDU: The timing of that. Your Honor. 
THE COURT: What is that? 

MS. CADEDDU: The timing of the grouping briefs, 
when do you want the initial brief, and the response? Or 
do you want them the same day and on the same day what 
day? I am a detail girl. 

THE COURT: I was really thinking about the same 
day. That is why both sides should know the other sides' 
respective argument. 

MS. CADEDDU: That is fine. Your Honor. 

THE COURT: There's one exception. Out of 
fairness, now, I do not want either side raising an 
argument that has not been previously made. If that 
happens, then the other side is going to say that is not 
previously made, and I did not anticipate that and 
therefore I want a chance to reply. 
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So I think that as to the grouping issue, I think a 
week from today is fine. I will get all of this out in 
an order. I will get this out in an order the first 
thing in the morning. 

MS. CADEDDU: Thank you. Your Honor. One last 

thing . 

THE COURT: Sure. 

MS. CADEDDU: We are still waiting on the motion 
to unseal the sentencing memorandum which have more 
relevance to people than it did when we thought we would 
complete the hearing by today. 

THE COURT: I don't know what relevance it has as 
far as the Court is concerned. It is not going to have 
relevance to the issues that the Court has to decide. 
What relevance does it have to the issues that the Court 
has to decide, that is, whether it remains sealed or 
unsealed? 

MS. CADEDDU: That is correct. I was pointing 
out we still have that issue pending, and there is a lot 
of interest . 

THE COURT: Well, there is a lot of interest 
because the interest has been created because the media 
would not know about the sealed document unless it was 
revealed to them. The same day that the sentencing 
memorandum was filed, there was something tweeted and 
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then I get in the motion that there is a request from the 
media. The only reason there is any request or interest 
from the media is because somebody tipped them off as to 
the memorandum being filed. 

I guess my question is this really as far as the 
Court is concerned whether the document is released or 
not really makes no difference as to what the Court has 
to do. It has no effect on what the Court is going to do 
whether it is released to the public or not. My only 
concern would be this. If there is some portions of the 
sentencing memorandum that include parts of the 
pre-sentence report which is confidential under seal, 
then the Court has a concern about that and those 
portions of the sentencing memorandum must be redacted or 
deleted before they are made public. 

MS. CADEDDU: Your Honor, I mean -- the filing of 
the motion was in response to requests for sentencing 
materials which journalists know are filed in every case, 
and I guess I would just say that I think I have 
discharged my duty to the First Amendment by filing a 
motion to unseal it, so if journalists — if the Court 
wants to rule on at this time the Court can, and if 
journalists want to themselves take it up with the Court, 
then I have discharged my duty. 

THE COURT: Well, what I am saying there has 

Charyse C. Crawford, CSR, RPR 
1100 Commerce, Room 1544, Dallas, Texas 75242 
(214)753-2373 Telephone 
Charyse_Crawford@txnd.uscourts.gov or charysecrawford@gmail.com 



1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 



233 



been an issue that has been created unnecessarily as far 
as the Court is concerned. I have stated my position. 
Frankly speaking, I thought I made myself clear. I will 
restate it . To the extent that the motion — excuse 
me — to the extent that the memorandum contains 
provisions of the pre-sentence report, those provisions 
must be redacted. The pre-sentence report is under seal, 
and I am not going to change that . I thought — I 
thought the parties pretty much did not object in that 
respect . 

MS. CADEDDU: No, we do not. Your Honor. 

THE COURT: All right, and the other question is 
this. Can the parties get together and redact those 
portions of the pre-sentence report — excuse me — of 
the sentencing memorandum that contain excerpts from the 
pre-sentencing report? 

MS. CADEDDU: I am confident that we can. 

THE COURT: Ms. Heath? 

MS. HEATH: Yes, Your Honor. There is also the 
issue of some of the attachments contain private 
information, and I was never really understanding about 
the attachment because not all the letters that showed up 
in the chart were provided, so I don't know if my e-mail 
just failed in that respect, and I didn't get all the 
letters . 

Charyse C. Crawford, CSR, RPR 
1100 Commerce, Room 1544, Dallas, Texas 75242 
(214)753-2373 Telephone 
Charyse_Crawford@txnd.uscourts.gov or charysecrawford@gmail.com 



1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 



234 



MS. CADEDDU: Well, Exhibits B and C, Your Honor, 
were charts of letters. The first one, B, was a chart of 
letters from interested parties including journalists, a 
Nobel prize winner, the people. There was a selection of 
letters attached to that just because I never -- we never 
submit every letter that is submitted to the Court 
especially when you have hundreds because it is 
overwhelming. We picked a sample from each different 
category, but they are available if the Court wants to 
review them all, and Exhibit C is letters, a chart of 
letters from family and personal friends, and there is a 
selection of those as well because once again 
overwhelming. Both of those exhibits were submitted 
under separate cover to the Court, and they are not filed 
in the Court's record under seal. 

The only exhibit to which the motion to unseal would 
pertain would be A and D which were filed under seal. 
Both Exhibit D was already redacted of personal 
information. I don't believe there is any personal 
information either A or D. 

THE COURT: All right. Let me make myself 
clear. Maybe I didn't make myself clear. If portions — 
if the relevant portions of the sentencing memorandum 
filed by the defense on behalf of Mr. Brown are redacted, 
is there any objection to the unsealing of that document? 
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MS. HEATH: No, Your Honor. 

THE COURT: All right, can the parties get 
together and redact those portions of the pre-sentence 
report that are contained in the memorandum and any other 
confidential information if it included things such as 
date of birth, driver's license, or social security 
number. I don't think any of that information is on 
there, so what I am saying is it seems to me that the 
parties ought to be able to reach a consensus on that. 

MS. CADEDDU: I agree. 

THE COURT: And the Court has no problem 
unsealing the document. The only thing that I require is 
that that portion of the sentencing memorandum that 
includes excerpts of the pre-sentence report must be 
redacted and the motion to unseal is granted. 

MS. CADEDDU: We will take care of that. Your 

Honor . 

THE COURT: All right, anything else? 

MS. CADEDDU: Not from the defense. Your Honor. 

THE COURT: All right, just for everyone in the 
courtroom, as the Court stated earlier, the actual 
sentencing will take place on January 22 at 9:00 a.m. and 
the Court does not intend to take any evidence and the 
Court will not allow any evidence unless an issue comes 
up that was totally unforeseeable and was not anticipated 
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with due diligence. 

There being nothing further, the Court is in recess. 

Mr. Brown, you are remanded to the custody of the United 

States Marshal. 

THE COURT SECURITY OFFICER: All rise. 

(THE HEARING WAS CONTINUED UNTIL JANUARY 22, 2015, AND 

THE COURT WAS IN RECESS.) 
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